sitegeist/slipstream

It includes tests, release notes, a license, and a small dependency surface. The organization-owned repository is intact, but its workflow uses two unpinned actions and lacks a security policy and scanning.

Latest v2.3.0

Packagist

66%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 15 releases since October 2020, but none in the last 12 months; its latest release was over a year ago. This lowers confidence in active maintenance, though the historical cadence was previously regular.

Repo commit activity

The repository had zero commits and zero active maintainers in the last three months. Together with the lack of recent releases, this is a meaningful maintenance concern.

Repo issue activity

There were no new or closed issues or pull requests in the last month, with three issues still open. This is limited evidence on its own but is consistent with the recent inactivity.

Repo popularity

The repository has 8 stars and 1 fork, indicating a small user and contributor footprint. Popularity is only supporting evidence, so this modestly limits confidence rather than making the package unsafe.

Repo tooling

Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a hygiene gap, not evidence of maliciousness or an immediate dependency failure.