andrewgjohnson/imagecolorallocatefromstring
The package includes tests, release notes, a clear license, and a recent release cadence. Its small maintenance base and unpinned workflow actions leave meaningful room for continuity and build-integrity concerns.
72%
Total Score
50
100
100
75
Health Score Breakdown
All recent commit activity comes from one contributor, leaving maintenance dependent on a single individual. The repository is user-owned rather than organization-backed, so there is no provided compensating project-backing evidence.
The repository recorded one commit in the last three months from one active maintainer. Recent activity exists, but the low volume limits evidence of sustained maintenance capacity.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That is a build-integrity hygiene gap rather than a severe risk on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrew G Johnson |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 andrewgjohnson/agjgd Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.