Package Health

baggins800/reverb-rs

The repository includes tests, release notes, and a clear license. All 22 workflow actions are unpinned, and the project has no security scanning or security policy, leaving avoidable maintenance gaps.

Latest v0.1.1PackagistPackagist

64%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

50

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

The package is less than a day old and has only two releases, so there is not yet enough history to show dependable maintenance or release practices.

Repo commit activitycaution

No commits or active maintainers were recorded in the last three months, which is consistent with the package's very recent creation but does not yet demonstrate sustained maintenance.

Security policycaution

The repository has no security policy, leaving disclosure and security-maintenance expectations undocumented for a server package.

Version stabilitycaution

Version v0.1.1 is below 1.0, indicating an early API and implementation stage despite not being marked as a prerelease.

Workflow auditcaution

All 22 analyzed action references are unpinned, and one release workflow has top-level write permissions. The low-confidence cache-poisoning finding is hygiene rather than a severe risk, but the overall workflow setup needs tightening.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Ruan Luies

Direct Dependencies

DependencyLast ReleaseScore
laravel/reverb
Version ^1.0
—
—
illuminate/redis
Version ^10.47|^11.0|^12.0|^13.0
—
—
illuminate/console
Version ^10.47|^11.0|^12.0|^13.0
—
—
illuminate/support
Version ^10.47|^11.0|^12.0|^13.0
—
—
illuminate/contracts
Version ^10.47|^11.0|^12.0|^13.0
—
—

Weekly Downloads

Info

Last Published
3 days ago
Created
3 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform