winter/wn-search-plugin

The package includes tests, a substantial README, release notes, and an active organization-owned repository. Its long release interval and one-contributor recent activity leave maintenance capacity thinner than ideal, while the workflow has no high-severity findings but uses one unpinned action.

Latest v1.0.1

Packagist

68%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases have been published across 786 days, with one release in the last 12 months and a median interval of about 765 days. The recent release is positive, but the overall cadence is slow for a dependency.

Repo bus factor

One contributor made all recent commits, creating concentrated maintenance risk. Organization ownership provides some handoff capacity, so this is a caution rather than a severe risk.

Repo commit activity

The repository had only one commit in the last three months, indicating limited recent development activity. The recent release and organization backing provide some compensation, but not for the thin maintenance pace.

Repo tooling

Composer build tooling is present, but no security scanning tooling was detected. This is a modest process gap rather than evidence of abandonment.

Workflow audit

The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, and it does not grant top-level write permissions. Its one action is unpinned, which is a minor reproducibility and supply-chain hygiene gap.