starcitizenwiki/embedvideo

This release appears healthy and suitable to depend on: it is a stable 4.2.0 release from a package with a long history, recent publication, an unarchived organization-owned repository, active recent commits from three contributors, ongoing pull-request activity, tests, changelog documentation, build tooling, and Dependabot scanning. The main reservations are a relatively small project and contributor base, only two releases in the last 12 months, no repository security policy, and workflows that do not declare top-level token permissions; these are transparency and hardening gaps rather than evidence of abandonment. No prior malware scan result was available, but that is outside this health assessment.

Latest 4.2.0Packagist

Health Score Breakdown

Release historycaution

The package has existed for about 5 years and 3 months with 28 releases, and its latest release is current, but only 2 releases occurred in the last 12 months; this suggests a mature but not rapidly releasing project.

Security policycaution

No SECURITY policy was found in the repository, leaving vulnerability-reporting and response expectations undocumented.

Token permissionscaution

Both analyzed workflows lack top-level token-permission declarations. No workflow requests top-level write access, but explicit least-privilege permissions would provide stronger CI hardening.

View all 19 health checks

Direct Dependencies

Dependency	Last Release	Score
composer/installers Version >=1.0.1	—	—