verbb/icon-picker

Healthy and suitable to use, with a thin active contributor base as the main caveat. It has frequent releases, a current unarchived repository, clear licensing, and organization backing, but no automated security scanning or repository tests were found.

Latest 3.0.16

Packagist

78%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

100

Health Score Breakdown

Package scaffolding

The package includes a README and changelog, and the repository uses GitHub Releases, but neither the artifact nor repository contains tests. The missing tests reduce maintenance transparency for a plugin of this size.

Repo bus factor

One contributor made all six commits in the last three months, creating a concentrated maintenance dependency. Organization backing provides some handoff capacity, but no second active contributor is shown.

Repo commit activity

There were six commits in the last three months, showing recent maintenance, but all were made by one active maintainer. The release cadence partly offsets the narrow activity base.

Repo issue activity

The repository closed two issues in the last month and received three pull requests, although none were merged during that period. Activity is present but its resolution rate is a modest concern.

Repo tooling

The repository uses Composer for builds and has a security policy, but no security-scanning tools were detected. This is a transparency and process gap rather than evidence of an unsafe release.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Verbb

Direct Dependencies

Dependency	Last Release	Score
verbb/base Version ^3.0.0	—	—
cakephp/core Version ^5.0.0	—	—
craftcms/cms Version ^5.0.0	—	—
cakephp/utility Version ^5.0.0	—	—
dompdf/php-font-lib Version ^1.0	—	—