awuxtron/websocket
It includes tests, release notes, a clear MIT license, and a security policy. The repository's workflow audit also found a high-confidence bot-condition issue and all 13 action references are unpinned, adding maintenance and build-integrity concerns.
42%
Total Score
0
71
75
Health Score Breakdown
The package has only two releases, both in May 2022, with no releases in the last 12 months. That long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that has not shown recent maintenance activity.
The repository has zero stars and forks and only one watcher. Popularity is supporting evidence rather than a verdict, but these counts provide little evidence of a broad user or contributor base.
Version 0.0.2 is not a stable major release, so the package has limited maturity evidence even though this specific version is not marked prerelease.
All 13 analyzed action references are unpinned, and a high-confidence bot-conditions finding reports that actor context may be spoofable. The pull_request_target workflow has no untrusted checkout or script-injection findings, which limits the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Awuxtron |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^2.2 | — | — |
ratchet/rfc6455 Version ^0.3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.