aiptu/blockreplacer
The MIT license, matching source repository, and focused dependency set make the package transparent to inspect. Its release notes and stable versioning help, while all four workflow actions remain unpinned.
65%
Total Score
75
100
88
67
Health Score Breakdown
The package has had five releases since June 2023, but none in the last 12 months and the latest release was April 2024. This is a meaningful maintenance concern for a package with a long history.
No commits and no active maintainers were recorded in the last three months. Although the repository is not archived, this indicates currently limited visible development activity.
Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence that the package is unfit.
The repository has no security policy. For a small game plugin this is a limited process gap, but it reduces clarity about vulnerability reporting.
The single workflow was fully analyzed with no untrusted checkout, injection, or high-confidence audit findings, and it scopes permissions at job level. However, all four referenced actions are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 aiptu/sounds Version ^1.3 | — | — |
ifera-mc/update-notifier Version dev-master | — | — |
pocketmine/pocketmine-mp Version ^5.15 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.