acdh-oeaw/arche-thumbnails
Clear documentation, tests, and a matching repository make integration straightforward. The workflow uses three unpinned actions, while recent work comes from one contributor; these are modest continuity and build-hygiene concerns.
80%
Total Score
83
94
50
Health Score Breakdown
One contributor made all 2 commits in the last 3 months, creating concentration risk. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.
Composer is used for builds, but no security scanning tool was detected. The missing scanning is a modest transparency gap rather than evidence of abandonment.
The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although it is not by itself evidence that the release is unsafe.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, leaving a minor build reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mateusz Żółtak |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zozlak/logging Version ^1 | — | — |
guzzlehttp/guzzle Version ^7 | — | — |
acdh-oeaw/arche-lib Version ^7 | — | — |
acdh-oeaw/arche-diss-cache Version ^3.2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 13 days ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.