algo-web/podata
It has a README, tests, a changelog, MIT licensing, and an organization-owned repository. However, all workflow actions are unpinned and the repository lacks a security policy, weakening maintenance confidence.
48%
Total Score
50
86
50
Health Score Breakdown
The latest release was about three years ago, with no releases in the last 12 months. Eleven releases over the package's lifetime show prior activity but do not offset the current pause.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating likely abandonment risk.
The repository has no security policy, leaving vulnerability-reporting and response expectations unclear for a security-relevant PHP service framework.
All 20 analyzed action references are unpinned, which weakens build reproducibility. Two high-confidence template-injection findings are also present, but no untrusted checkout or script-injection trigger was reported, so this is not a standalone severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 c-harris |
| Alex Goodwin |
| POData Project |
| Microsoft Open Technologies, Inc. |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 myclabs/php-enum Version ^1.7 | — | — |
doctrine/inflector Version >=v1.0 | — | — |
cruxinator/php-bitmask Version ^0.1 | — | — |
algo-web/o-data-metadata Version ^0.1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.