Package Health/yii3-extensions/asset-fontawesome-free

yii3-extensions/asset-fontawesome-free

The package is small but well structured, with tests, release notes, a matching source tree, and clear licensing. Its workflow references are all unpinned, and no security policy is published.

Latest 0.1.1

Packagist

58%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

Only two releases were published, with the latest on January 23, 2024 and none in the last 12 months. The repository was updated later, which partly offsets the registry inactivity but does not restore release confidence.

Repo commit activity

There were no commits and no active maintainers in the last three months. The later repository push is compensating evidence, but current maintenance capacity remains uncertain.

Security policy

The repository has no published security policy, leaving vulnerability-reporting expectations unclear. Dependabot provides some compensating security hygiene.

Version stability

Version 0.1.1 is a stable, non-prerelease release, but it remains below a stable major version and has little release history.

Workflow audit

All five workflows were analyzed without high-confidence audit findings or untrusted checkouts, but all five action references are unpinned. That weakens build reproducibility and supply-chain hygiene without making the package unfit on its own.