baraja-core/variable-generator
The repository is small, but it has a clear README, an MIT license, security tooling, and organization backing. Nearly five years without a registry release and seven unpinned workflow actions make this older release less reassuring for long-term use.
62%
Total Score
75
93
100
Health Score Breakdown
The latest registry release was nearly five years ago, with no releases in the last 12 months. This is a meaningful maintenance concern, although the linked repository was pushed more recently.
There were no commits and no active maintainers in the last three months. The recent repository push shown elsewhere provides some compensation, but current development activity remains unproven.
Both workflows were fully analyzed with no dangerous findings or untrusted checkouts, but all 7 action references are unpinned. That weakens build reproducibility and supply-chain hygiene without making the package unfit by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jan Barášek |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 baraja-core/lock Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.