aplus/database-extra
Tests, a security policy, and release notes improve transparency, and the package has no install scripts or deprecation notice. Pin this version only if its stable API meets your needs; maintenance evidence is currently thin.
67%
Total Score
75
93
100
Health Score Breakdown
The package has 18 releases since March 2020, but none in the last 12 months; its latest registry release was over two years ago. This weakens confidence in ongoing maintenance despite a historically regular cadence.
The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed recently, the observed commit activity does not demonstrate active development.
The single analyzed workflow is complete and has no untrusted checkout or script-injection findings, but all four action references are unpinned and two high-confidence unpinned-container-image findings were reported. This is a meaningful build-reproducibility and workflow-hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Natan Felles |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 aplus/cli Version ^3.0 | — | — |
aplus/helpers Version ^4.0 | — | — |
aplus/database Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.