ar-sebastian/workbench
The README is substantial, the release includes notes, and ten commits landed in the last three months. Only one contributor is active, and no security policy is published.
68%
Total Score
75
100
83
75
Health Score Breakdown
The package declares CC-BY-SA-3.0, while the artifact license file was recognized as ISC. License files are present in both the artifact and repository, but the mismatch creates adoption and compliance uncertainty.
The package is only 47 days old, with seven releases published in a single burst on the first release day. This shows active initial development but provides little evidence of long-term maintenance.
All 10 commits in the last three months came from one contributor, leaving maintenance dependent on a single active person. The repository owner is an individual rather than an organization, so there is no shown organizational handoff buffer.
The repository has no published security policy. For a Roundcube skin that includes JavaScript and templates, this weakens the project's security-reporting transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sebastian Heldt |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 roundcube/plugin-installer Version >=0.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.