alex-kalanis/simple-vin
It has clear licensing, a matching source tree, repository tests, release notes, and no install-time scripts. Maintenance has gone quiet, and all eight workflow actions are unpinned, leaving meaningful upkeep and build-integrity concerns.
64%
Total Score
50
100
88
75
Health Score Breakdown
The package has had no releases in the last 12 months, with the latest release over 15 months ago. This indicates a meaningful maintenance slowdown for a library consumers may depend on.
There were zero commits and zero active maintainers in the last three months, reinforcing the release-history evidence that maintenance has stalled.
Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than evidence of a defect.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities.
The workflow audit completed successfully with no dangerous triggers or audit findings, but all eight action references are unpinned. That leaves builds exposed to future action changes and is a concrete integrity-hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/clock Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.