bear/skeleton
Skeleton application for BEAR.Sunday
76%
Total Score
83
100
50
Health Score Breakdown
One contributor made about 96% of the 26 recent commits, which concentrates maintenance risk; the second active contributor and organization ownership partly compensate.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear despite its Psalm scanning.
All 23 analyzed action references are unpinned, and a high-confidence audit found an unlocked package installation; one workflow also grants top-level write access, creating avoidable maintenance and supply-chain exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ray/di Version ^2.14 | — | — |
ray/aop Version ^2.12 | — | — |
bear/sunday Version ^1.6 | — | — |
bear/package Version ^1.24 | — | — |
bear/app-meta Version ^1.11 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.