appengine-ltd/ticket-picker
It has tests, release notes, a security policy, and only one runtime dependency. The five unpinned workflow actions add a smaller build-integrity concern, while the stable version and non-deprecated status provide some reassurance.
52%
Total Score
50
100
92
75
Health Score Breakdown
The package has 8 releases, but all were published in a brief burst and there have been no releases in about 17 months. That weakens evidence of ongoing maintenance.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with the long release gap and increasing abandonment risk.
All 5 analyzed workflow action references are unpinned, which weakens build reproducibility and supply-chain hygiene. The audit found no untrusted checkouts, script injection, or other higher-impact findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 App Engine Ltd |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.