soyhuce/next-ide-helper

Clear documentation, a substantial source tree, and repository tests make the package easier to adopt. Maintenance has been quiet for three months, while high-confidence workflow findings and unpinned actions add supply-chain exposure.

Latest 2.3.0

Packagist

55%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Workflow audit

All five workflows were analyzed, but all 11 action references are unpinned and the audit found high-confidence bot-condition and unpinned-container-image issues. The pull_request_target workflow also has top-level write permissions, increasing workflow supply-chain exposure.

Release history

The package has existed since May 2020 with 72 releases, but only one release in the last 12 months, indicating a sharply slower release pace.

Repo commit activity

There were zero commits and zero active maintainers in the last three months. Although a recent release and push show the project is not abandoned outright, the current maintenance capacity looks thin.

Repo issue activity

The repository has only one open issue and five open pull requests, but no issues or pull requests were opened or closed in the last month, reinforcing the signs of limited current activity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Bastien Philippe

Direct Dependencies

Dependency	Last Release	Score
composer/semver Version ^3.0	—	—
illuminate/view Version ^11.0\|^12.0\|^13.0	—	—
illuminate/console Version ^11.0\|^12.0\|^13.0	—	—
illuminate/support Version ^11.0\|^12.0\|^13.0	—	—
illuminate/database Version ^11.0\|^12.0\|^13.0	—	—