syntro/silverstripe-bootstrap-forms

syntro/silverstripe-bootstrap-forms@6.1.0 looks maintainable and reasonably well-hygienic: it is not deprecated, the repo is not archived, releases are happening recently (latest in 2026), and the project includes README/changelog plus automated tests. The main caution is around project-security hygiene and continuity signals: there is no documented security policy, and GitHub Actions token permissions are not set at the top level, which can increase risk if workflows evolve. Overall, it appears safe to depend on, but you should monitor repository security/workflow settings and maintainer continuity.

Latest 6.1.0Packagist

Health Score Breakdown

Repo bus factorcaution

Work appears split between two contributors with a top contributor share of 50% (indicator_code: repo_bus_factor). This reduces single-person abandonment risk, though it is still a small contributor base.

Security policycaution

No security policy is present (indicator_code: security_policy), which weakens the transparency of vulnerability reporting/handling despite other tooling signals.

Token permissionscaution

The workflow(s) lack top-level GitHub Actions permissions configuration (indicator_code: token_permissions). This is commonly mitigated elsewhere, but as a detected hygiene gap it slightly increases supply-chain risk if workflows ever broaden permissions.

View all 13 health checks

Vulnerabilities

We didn't find any vulnerabilities for this package.

Maintainers

Matthias Leutenegger

Direct Dependencies

Dependency	Last Release	Score
silverstripe/framework Version ^6	—	—
giggsey/libphonenumber-for-php Version ^8.0	—	—