bellows-app/cli
The organization-backed repository includes tests, a license, and release notes for this version. Its workflow uses broad write access and unpinned actions, while maintenance has stopped since February 2024.
46%
Total Score
50
80
75
Health Score Breakdown
The package has made no release in more than two years: its latest release was February 8, 2024, with zero releases in the last 12 months. Earlier releases were frequent, but the prolonged gap raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating no recent maintenance capacity.
The repository has no security policy, leaving users without a documented process for reporting or handling security issues. This is a transparency gap, though it is secondary to the inactivity evidence.
The single analyzed workflow is complete and has no reported audit findings, but all three action references are unpinned and the release workflow grants top-level write permissions. Those choices weaken build reproducibility and token hygiene without showing an active exploit path.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joe Tannenbaum |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^6.2 | — | — |
opis/json-schema Version ^2.3 | — | — |
illuminate/database Version ^10.0 | — | — |
bellows-app/plugin-sdk Version ^0.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.