aisdk/prodia
MIT licensing, tests, release notes, and Composer security scanning provide a solid baseline. The workflow uses read-only permissions but leaves both action references unpinned, reducing build reproducibility.
68%
Total Score
67
100
86
100
Health Score Breakdown
The package is only 60 days old with two releases, both published within a very short interval, so long-term maintenance is not yet demonstrated.
One contributor made all two recent commits, creating concentration risk; organization ownership provides some handoff capacity but does not establish independent activity.
There were two commits in the last three months, showing some activity, but the small volume provides limited evidence of sustained maintenance.
The release is not marked as a prerelease, but the v0.8.1 version and very young release history indicate a project that has not yet demonstrated mature stability.
The single workflow was fully analyzed, has read-only permissions, and has no detected audit findings. Both action references are unpinned, however, which weakens reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 aisdk/core Version ^0.8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.