amplify/sayt
Release activity is strong, with 70 releases in the last 12 months and 30 recent commits. Three active contributors, organizational backing, and a security policy help, but the release lacks a README and the repository has notable workflow hygiene issues.
65%
Total Score
100
100
79
83
Health Score Breakdown
The manifest declares GPL-3.0-or-later, while the artifact license file is detected as MIT; although both the artifact and repository contain license files, the mismatch creates legal and transparency uncertainty.
The package has no README, which makes a library harder for consumers to integrate, but its GitHub release includes notes for version 2.0.3 and repository release tooling is present.
The project uses Composer for builds, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
All three action references are unpinned, one workflow grants top-level write access, and a high-confidence template-injection finding was reported; there are no untrusted checkouts or dangerous triggers, so this is a hygiene concern rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hafijul Islam |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spatie/url Version dev-main | — | — |
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.