andersundsehr/no-ci
The project is clearly tied to its source repository and has a current release with documented changes. Its very small release history, quiet recent activity, and unpinned workflow actions leave maintenance and build-integrity concerns.
67%
Total Score
75
86
75
Health Score Breakdown
The package has only 2 releases since December 2022, with a median interval of about 3 years, but it did publish once in the last 12 months.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating limited recent maintenance activity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest verification gap.
No security policy was found in the repository, reducing transparency for reporting and handling vulnerabilities.
The sole workflow was fully analyzed without dangerous triggers or audit findings, but all 3 action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matthias Vogel |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ondram/ci-detector Version ^4.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.