blueways/bw-icons
A clear README, repository tests, and a proper license make integration and ongoing use easier. Ownership is concentrated in one contributor, while workflow permissions and security-policy coverage are limited.
76%
Total Score
60
100
94
60
Health Score Breakdown
One of four workflows uses pull_request_target, which can require careful privilege handling even though no untrusted checkout or script-injection pattern was detected.
The package runs a post-autoload-dump install-time script, adding execution during dependency installation and therefore a modest supply-chain hygiene concern.
Only one account has registry publish access. That is a limitation, but the repository's recent activity shows the package is currently being maintained.
The repository is owned by an individual rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
One contributor made all seven recorded contributor commits in the recent period, so maintenance could be disrupted if that person becomes unavailable.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Maik Schneider |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/cms-core Version ^12.4 || ^13.4 | — | — |
phenx/php-font-lib Version ^1.0 | — | — |
sabberworm/php-css-parser Version ^8.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.