soderlind/all-sites-cron

Clear documentation, tests, release notes, and recent commits support dependable maintenance. The project still relies on one active contributor, lacks a security policy, and leaves half of workflow action references unpinned.

Latest 2.2.1

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Project backing

The package and repository are owned by the same individual, so the single-person maintainer base is not offset by organization backing.

Repo bus factor

All four recent commits came from one contributor, leaving maintenance dependent on a single person and increasing abandonment risk.

Repo tooling

Composer build tooling is used, but no security-scanning tooling was detected; the missing scanner is a maintenance hygiene gap rather than evidence of unsafe code.

Security policy

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow audit

Both workflows scope permissions at job level and have no untrusted checkouts or injection findings, but 4 of 8 action references are unpinned, weakening build reproducibility.