async-aws/code-build
The package has a clear source tree, release notes, tests in the repository, and an organization-backed maintenance path. GitHub Actions use four unpinned references and the repository has no security policy, so build transparency is weaker than its release record.
86%
Total Score
100
100
94
83
Health Score Breakdown
The project uses Make and Composer build tooling, showing a defined build process. No security scanning tools were detected, which is a minor transparency gap rather than a severe risk.
The repository has no security policy. This weakens vulnerability-reporting transparency, although the active organization-backed project and clean package structure partly offset the gap.
Both workflows were analyzed with no untrusted checkouts, script injection, or audit findings, and none grants top-level write access. However, all 4 of 4 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 async-aws/core Version ^1.9 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.