Package Health/web-builder-sdk/platforms-init

web-builder-sdk/platforms-init

MIT licensing, a small dependency set, and an intact source tree support straightforward integration. The organization-backed project has release notes and no install-time scripts, though its limited security process leaves less transparency.

Latest v1.0.2

Packagist

61%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access, which is a limited publishing base. The organization-owned repository provides some backing, so this is a modest concern rather than a severe risk.

Release history

The package has only three releases and its latest release was about two years ago, with no releases in the last 12 months. This indicates limited ongoing maintenance despite the package's mature stable version.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. Together with the old latest release, this weakens confidence that defects or compatibility issues will be addressed promptly.

Repo tooling

Composer is used for the build, which fits the ecosystem, but no security-scanning tooling was detected. That leaves less evidence of routine vulnerability monitoring.

Security policy

The repository has no documented security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, although it does not by itself show that the package is unsafe.