bitbag/catalog-plugin
The source includes tests, a substantial README, and release notes for this version, with organization backing and no install scripts. Its workflow uses eight unpinned actions and the repository has no security policy, so maintenance and build hygiene deserve attention.
62%
Total Score
75
90
67
Health Score Breakdown
The package has 23 releases and a stable history, but its latest release was about 20 months ago and it had no releases in the last 12 months, indicating reduced maintenance activity.
The repository recorded zero commits and zero active maintainers over the last three months, which weakens evidence of ongoing maintenance despite the recent release history.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, not evidence of a security defect.
The workflow was fully analyzed with no untrusted checkout or script-injection paths, but all 8 of 8 action references are unpinned. The reported cache-poisoning findings are low confidence and therefore add hygiene concern rather than severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sylius/sylius Version ^1.13 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.