amethyst/order
The package has tests, an MIT license, and organization backing. Its documentation and release process are basic, while the workflows use an unpinned container image and the project has seen no commits or releases for over six years.
40%
Total Score
50
71
0
Health Score Breakdown
The latest release was over six years ago, with no releases in the last 12 months; 14 releases show some historical activity but do not offset the prolonged silence.
There were zero commits and zero active maintainers in the last three months, consistent with the release history showing prolonged inactivity.
All three workflows were analyzed without untrusted triggers or script injection, but the test workflow has a high-confidence unpinned container image finding and all six action references are unpinned.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest maintenance-hygiene gap.
v0.2.1 is not a stable major release, which limits maturity evidence, although it is not marked as a prerelease.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 amethyst/core Version 0.2.* | — | — |
amethyst/product Version 0.2.* | — | — |
amethyst/legal-entity Version 0.2.* | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.