Package Health

async-aws/rekognition

It has a clear MIT license, a small runtime dependency set, and a documented package with tests and release notes. The linked organization-backed project has two active contributors, though it lacks a security policy and pins none of its four workflow actions.

Latest 1.9.0PackagistPackagist

86%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo toolingcaution

The project uses Make and Composer for builds, but no security-scanning tools were detected. The missing scanner is a modest transparency gap, not evidence of abandonment.

Security policycaution

No repository security policy was found. This weakens the project's documented vulnerability-reporting process, though it does not outweigh the active maintenance and release evidence.

Workflow auditcaution

Both workflows were analyzed successfully with no audit findings, unsafe triggers, or untrusted checkouts. However, all four action references are unpinned; the lack of top-level permissions is acceptable on its own but does not offset that reproducibility gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
async-aws/core
Version ^1.9
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform