bluefyn-international/report-engine
It has a clear MIT license, release notes, repository tests, and a security policy. Maintenance has stopped for about 18 months, and the build workflow uses an unpinned container image.
32%
Total Score
50
81
83
Health Score Breakdown
The registry marks the entire package as abandoned, which is a serious adoption and maintenance risk despite the linked repository being available.
The package has 43 releases since June 2021, but none in the last 12 months; the latest release was about 18 months ago, indicating a prolonged release gap.
The repository had no commits and no active maintainers in the last three months, reinforcing the evidence of halted maintenance.
Both workflows were analyzed successfully, with no untrusted triggers or script injection, but all five action references are unpinned and a high-confidence audit found an unpinned container image.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 AlwaysOpen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 brick/money Version ^0.10.0 | — | — |
always-open/sidekick Version ^5.1 | — | — |
illuminate/contracts Version ^11.0|^12.0 | — | — |
spatie/laravel-package-tools Version ^1.19.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.