bitbucket/client
The long-lived project has a stable release, release notes, repository tests, a license, security policy, and no install-time scripts. Maintenance activity is currently quiet, while workflow dependencies are not pinned.
68%
Total Score
83
100
100
100
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. This is a real maintenance concern, though it is partly offset by the recent release and current issue or pull request activity.
Both workflows were analyzed successfully with no audit findings or untrusted execution sinks, and no workflow has top-level write permissions. However, all 12 analyzed action references are unpinned, leaving avoidable build-integrity exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Graham Campbell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/cache Version ^2.0 || ^3.0 | — | — |
php-http/httplug Version ^2.4.1 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
php-http/discovery Version ^1.20.0 | — | — |
php-http/cache-plugin Version ^2.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.