alantaboev/differ
Tests, a clear README, and a small dependency set make the package straightforward to assess. The workflow has weak pinning and an archived action, while no security policy is published.
52%
Total Score
50
83
50
Health Score Breakdown
The latest release was over five years ago, with no releases in the last 12 months. That materially raises abandonment risk despite the package having 13 historical releases.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance activity.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap for a package intended to be used as a dependency.
All 3 analyzed action references are unpinned, and the workflow uses an archived action with high-confidence medium severity. No unsafe trigger or untrusted checkout was found, so this is a hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alan Taboev |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 funct/funct Version ^1.5 | — | — |
symfony/yaml Version ^5.1 | — | — |
docopt/docopt Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.