adnanmula/spout
The package includes a license, documentation, and repository tests. Its workflow uses 25 unpinned actions, and the repository has no security policy, adding maintenance and supply-chain hygiene concerns.
38%
Total Score
0
83
67
Health Score Breakdown
The package has had only 2 releases, with none in the last 12 months; its latest release was about 3 years and 8 months ago. This is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, corroborating the lack of recent releases rather than showing merely a stable cadence.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, although it is less serious than the observed inactivity.
All 25 analyzed action references are unpinned, which weakens build reproducibility and update control. The audit found no untrusted checkout, script injection, dangerous trigger, or high-confidence security finding, so this is a caution rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adrien Loison |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.