bluestone/collection
The package includes tests, a changelog, a matching repository, and a clear MIT license. Its Composer setup is small, but all five workflow actions are unpinned and no security policy is present.
42%
Total Score
50
70
50
Health Score Breakdown
Only three releases were published, all on December 7, 2022, with no releases in the last 12 months; this indicates a long period without maintained release activity.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release history and indicating likely abandonment.
The repository has zero stars and forks and only one watcher, so there is little visible community adoption to offset the lack of recent maintenance.
The repository has no security policy. For a small package this is a transparency gap, though it is less severe than the absence of recent maintenance.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all five action references are unpinned, leaving avoidable workflow supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 William |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.