azuracast/nowplaying
The stable major release, clear README, and organization-backed repository support a straightforward dependency. Maintenance has gone quiet recently, while the workflow leaves all three actions unpinned and has no security policy.
66%
Total Score
75
86
50
Health Score Breakdown
The package has six releases since February 2019, but none in the last 12 months and its latest release was about 14 months ago, indicating a slow and currently quiet release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently paused maintenance.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest assurance gap for a library with external dependencies.
The repository has no security policy, so users are given no documented channel or process for reporting vulnerabilities.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all three action references are unpinned, weakening build reproducibility and update safety.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Buster Neece |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version >=1 | — | — |
psr/http-client Version * | — | — |
psr/http-factory Version * | — | — |
guzzlehttp/guzzle Version >7 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.