Package Health/solution-forest/simple-contact-form

solution-forest/simple-contact-form

This is my package simple-contact-form

Latest v2.0.4

Packagist

62%

Total Score

caution

Usable with caveats: three months without commits and weak workflow pinning reduce maintenance confidence.

Health Score Breakdown

Lifecycle scripts

A post-autoload-dump lifecycle script runs during installation. This is worth noting as install-time behavior, but the signal alone does not show excessive or unsafe scripting.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. With only modest recent registry release activity, this lowers confidence in ongoing maintenance.

Repo issue activity

There are no open issues and four open pull requests, but no issues or pull requests were merged in the last month. This suggests limited current collaboration.

Workflow audit

All five workflows were analyzed, but all 12 action references are unpinned, and a high-confidence bot-condition finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, so this is workflow hygiene risk rather than a severe supply-chain finding.