altis/cloud
Cloud module for Altis
78%
Total Score
healthy
Active organization-backed project, with workflow template-injection findings and unpinned actions lowering otherwise strong health.
Health Score Breakdown
The package declares 13 runtime dependencies and no dev dependencies. This is a substantial integration surface, but the dependencies are explicitly listed rather than hidden.
The repository has no published security policy, leaving vulnerability-reporting expectations and response procedures less transparent.
All four workflows were analyzed, but all seven action references are unpinned, and two high-confidence template-injection findings affect release workflows; the separate pull_request_target workflow has no untrusted checkout or script-injection finding. The low-confidence-independent adhoc package installation is an additional hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Human Made |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 maxbanton/cwh Version ^2.0 | — | — |
monolog/monolog Version ^2.11 | — | — |
humanmade/aws-xray Version ~1.3.14 | — | — |
humanmade/batcache Version ~1.5.3 | — | — |
humanmade/cavalcade Version ^2.0.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.