alleyinteractive/feed-consumer
Clear documentation, tests, release notes, and a security policy support adoption. Maintenance is concentrated in one recent contributor, and workflows use broad permissions with unpinned actions.
79%
Total Score
75
100
100
Health Score Breakdown
All 5 commits in the last 3 months came from one contributor. The organization-owned repository provides some handoff capacity, but current activity remains highly concentrated.
There were no new or closed issues or pull requests in the last month, despite 6 open issues and 3 open pull requests. This is a modest sign of limited recent project interaction.
All 3 workflows were analyzed successfully with no reported audit findings or untrusted checkouts. However, all 5 action references are unpinned and 2 workflows grant top-level write permissions, creating workflow hygiene concerns without a demonstrated exploit path.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alley Interactive |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mantle-framework/support Version ^1.0 | — | — |
mantle-framework/http-client Version ^1.0 | — | — |
alleyinteractive/wp-block-converter Version ^1.8.2 | — | — |
alleyinteractive/composer-wordpress-autoloader Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.