brightnucleus/custom-content
It has clear documentation, tests, an MIT license, and a matching organization-backed repository. Unpinned workflow actions and no security policy add smaller transparency and build-hygiene concerns.
62%
Total Score
75
86
75
Health Score Breakdown
The package has 11 releases over roughly ten years, but none in the last year; that weakens evidence of ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the recent release gap.
The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities.
The assessed version is not a stable major release, so compatibility expectations are lower even though it is not marked prerelease.
Both workflows were analyzed without high-risk findings or untrusted checkouts, but all two action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alain Schlesser |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 brightnucleus/config Version >=0.4.3 | — | — |
doctrine/collections Version >=1.3 | — | — |
brightnucleus/contracts Version >=0.1.1 | — | — |
brightnucleus/exceptions Version >=0.2.5 | — | — |
brightnucleus/localization Version >=0.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.