Package Health/softcommerce/module-url-rewrite-generator

softcommerce/module-url-rewrite-generator

The package has a clear README, license, changelog, stable versioning, and a recent release. Maintenance capacity is currently uncertain, while the release workflow has broad write access, an unpinned action, and a high-confidence template-injection warning.

Latest 1.3.2

Packagist

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Repo commit activity

There were no commits and no active maintainers in the last 3 months. Although the recent release history is reassuring, the current lack of source activity raises maintenance risk.

Repo issue activity

The repository has 12 open issues but no issues or pull requests were opened, closed, or merged in the last month, suggesting limited visible project interaction.

Repo tooling

Composer is used for builds, but no security scanning tools are reported. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.

Security policy

The repository has no security policy. That weakens the documented process for reporting and handling vulnerabilities, though it does not by itself show an active defect.

Workflow audit

The sole workflow grants top-level write permissions, uses its only action unpinned, and has a high-confidence template-injection finding. No untrusted checkout or script-injection trigger was detected, so these are workflow hygiene concerns rather than a severe standalone risk.