zyan/gitlab-hooks

The package includes a usable README, tests, and MIT licensing. Install scripts are absent, and the workflow audit found no dangerous sinks, but dependency maintenance will be your responsibility.

Latest 1.2.6

Packagist

48%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The latest release was in November 2021, nearly five years ago, and there have been no releases in the last 12 months. This is strong evidence of abandonment risk despite 11 historical releases.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's long release gap and indicating no current maintenance capacity.

Repo popularity

The repository has only 1 star, 1 fork, and 1 watcher. Low popularity is supporting evidence rather than a verdict, but it provides little evidence of a broad community cushion.

Security policy

The repository has no security policy. For a package that receives GitLab webhook data and forwards it to chat services, this reduces transparency around vulnerability reporting.

Workflow audit

All 3 analyzed action references are unpinned, which weakens build reproducibility. The audit found no dangerous triggers, untrusted checkouts, script injection, or other reported findings, partly compensating for this hygiene gap.