altis/dev-tools
Healthy and actively maintained, with strong release and repository activity. Review the permissive GitHub Actions settings and lack of a security policy before adopting it in a sensitive build environment.
86%
Total Score
90
50
100
70
Health Score Breakdown
One of six workflows uses pull_request_target, which requires careful review because it can run with elevated repository context, although no untrusted checkouts or script-injection patterns were detected.
The package declares 15 runtime dependencies, including substantial testing and tooling components, which increases dependency surface and upgrade burden for a developer-tools package.
The repository has 19 open issues and no new issues or closed issues in the last month, but two pull requests were merged; this is a modest maintenance concern rather than abandonment evidence.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Five workflows omit top-level token permissions and one workflow grants top-level write access, creating avoidable CI privilege ambiguity and exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Human Made |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 behat/gherkin Version ~4.17.0 | — | — |
phpunit/phpunit Version ~9.6 | — | — |
lucatume/wp-browser Version ~4.5.15 | — | — |
codeception/module-db Version ~3.2 | — | — |
wp-phpunit/wp-phpunit Version 7.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.