bedrockstreaming/libyear
The package includes tests, a README, an MIT license, and a GitHub release. Its workflows use entirely unpinned actions and one archived action, adding maintenance risk.
40%
Total Score
50
83
75
Health Score Breakdown
The latest release was published in September 2022, and there were no releases in the last 12 months. This long release gap is strong evidence of abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no current maintenance activity.
All five analyzed action references are unpinned, and one workflow uses an archived action with high-confidence medium severity. No untrusted checkouts, script injection, or broad top-level write permissions were found, limiting the impact to workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/semver Version ^3.3 | — | — |
guzzlehttp/guzzle Version ^7.3 | — | — |
wp-cli/php-cli-tools Version ^0.11 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.