alek13/slack
The package has a substantial README, release notes, repository tests, and an active CI workflow. Its organization-backed repository is not archived, but security scanning is absent and all three workflow actions are unpinned.
70%
Total Score
75
100
94
50
Health Score Breakdown
All 16 commits in the last 3 months came from one contributor, with a 100% top-contributor share. Organization backing helps with handoff potential, but no second active contributor is shown.
Composer is used for builds, but no security scanning tool is reported, leaving a transparency and maintenance-hygiene gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent.
The single workflow was fully analyzed with no audit findings or untrusted execution sinks, but all 3 action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 maknz |
| Alexander Chibrikin |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^8.0|^7.0|^6.0|^5.0|^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.