amphp/uv
The repository is organized, with extensive documentation, tests, and an active security policy. Its organization ownership helps continuity, while six unpinned workflow actions remain a maintenance hygiene concern.
65%
Total Score
67
83
83
Health Score Breakdown
The package has only one release and no established release interval, so its maintenance track record is not yet demonstrated.
All recent commits came from one contributor, leaving maintenance dependent on a single active person; organization backing provides some continuity but does not remove the concentration.
Only one commit was recorded in the last three months, indicating limited recent maintenance activity even though some repository work occurred.
Version v0.3.1 is not a stable major release, which adds some maturity uncertainty, although it is not marked as a prerelease.
Both workflows were fully analyzed with no dangerous sinks or audit findings, but all six action references are unpinned, leaving avoidable workflow supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bob Weinand |
| Aaron Piotrowski |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 hours ago
- Created
- 6 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.