altis/documentation
Healthy and suitable to depend on. It has a long release history, frequent recent releases, active repository work from four contributors, and organizational backing; review the repository’s workflow permissions and lack of a security policy as governance gaps.
88%
Total Score
100
100
100
50
Health Score Breakdown
One of four workflows uses pull_request_target, which warrants review because that trigger can expose elevated repository context; however, no untrusted checkout or script-injection patterns were detected.
The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response procedures unclear.
Three of four workflows omit top-level token permissions, and one workflow declares write access; this weakens CI permission hygiene even though no direct exploitation pattern was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Human Made |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 erusev/parsedown Version ~1.8.0 | — | — |
mustangostang/spyc Version ^0.6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.