Package Health/webagentur-yahya/golive-check

webagentur-yahya/golive-check

The project is only 45 days old with two releases, so long-term stability is not yet demonstrated. Two active contributors, repository tests, a clear license, and read-only workflow permissions provide useful support; the missing security policy and unpinned actions remain weaknesses.

Latest 1.0.1

Packagist

72%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package is 45 days old and has only two releases, both published on the same day; this is too little history to establish durable maintenance, though it is not evidence of abandonment.

Repo popularity

The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly limits external validation but does not establish a maintenance problem.

Repo tooling

Composer is used for the build, but no security-scanning tool was detected. The build setup is appropriate, while the missing scanning capability is a hygiene weakness.

Security policy

The linked repository has no security policy. That reduces transparency about vulnerability reporting and response expectations, particularly for an extension that performs security-related checks.

Workflow audit

Both workflows use read-only permissions, but all five analyzed action references are unpinned. The publish workflow also has two high-confidence template-injection findings; template injection is a workflow hygiene concern here, while the unpinned references make builds less reproducible.