bethinkpl/fractal
The project has a long history, recent maintenance, repository tests, release notes, and a small runtime dependency footprint. Its workflows leave all 12 actions unpinned, and no security policy is published.
78%
Total Score
100
100
89
50
Health Score Breakdown
The repository reports zero stars, forks, and watchers, so there is little visible community adoption evidence. This is supporting context rather than a decisive health concern because maintenance and project backing are present.
No SECURITY policy was found in the linked repository, leaving vulnerability reporting and response expectations undocumented.
Version 0.20.1.2 is not a prerelease, but the package remains below a stable major version, so compatibility expectations are somewhat weaker than for a 1.x release.
All three workflows were analyzed without failed files or dangerous audit findings, and none grants top-level write access. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Phil Sturgeon |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.