bukashk0zzz/yml-generator
It has a clear MIT license, readable documentation, tests, a stable release, and limited runtime dependencies. The workflow audit found no dangerous triggers or findings, but the missing security policy reduces transparency for ongoing maintenance.
67%
Total Score
50
100
93
67
Health Score Breakdown
The package has existed for about 10 years with 23 releases, but only one release appeared in the last 12 months. That is slower activity, though not evidence of abandonment by itself.
The repository recorded zero commits and zero active maintainers in the last three months. A release exists, but this recent inactivity lowers confidence in ongoing maintenance.
There were no new or closed issues or pull requests in the last month, with five open issues and one open pull request. This is a modest sign of limited current project activity.
The repository has no security policy. That leaves vulnerability-reporting and response expectations undocumented, which is a transparency gap.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, leaving avoidable supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Denis Golubovskiy |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.