aura/includer
The project has clear documentation, tests, a changelog, a license, and two recently active contributors. Workflow action references are unpinned and the repository has no security policy, so maintenance transparency remains weaker than its structure suggests.
68%
Total Score
100
100
88
83
Health Score Breakdown
The package has five releases since January 2014, but its latest registry release was in October 2016 and it had no releases in the last 12 months. That materially raises version-freshness and abandonment concern, although repository activity provides some compensation.
Composer build tooling is present, but no security scanning tooling was detected, leaving automated security coverage unclear.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Both workflows were analyzed successfully with no injection, untrusted-checkout, or high-severity findings, and one scopes permissions at job level. However, all four action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Aura.Includer Contributors |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.