becklyn/diginights-api
The repository is not archived, and the package includes tests, release notes, a focused dependency set, and a clear README. The declared BSD license and organization ownership add transparency, while unpinned workflow actions and no security scanning leave hygiene gaps.
58%
Total Score
50
70
50
Health Score Breakdown
The package has seven releases but none in the last four years, with the latest published on May 13, 2022. That long release gap materially raises abandonment risk despite its earlier release history.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and suggesting the project is no longer actively maintained.
Composer is used for the build, but no security-scanning tools were detected. That is a maintenance and transparency gap, though it is not severe on its own.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions leave a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Becklyn Studios |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 becklyn/utilities Version ^2.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.