calliostro/last-fm-client-bundle
Clear documentation and release notes make integration easier, and the dependency set is modest. The workflow has all 10 actions unpinned, while no commits were recorded in the past 3 months.
70%
Total Score
50
100
100
75
Health Score Breakdown
The repository recorded 0 commits and 0 active maintainers in the past 3 months. A recent release and one merged pull request provide some compensating evidence, but the current activity gap still lowers maintenance confidence.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
All 10 analyzed action references are unpinned, which weakens build reproducibility. The audit also found high-confidence template-injection patterns, but no untrusted checkout or script-injection sink, so these remain workflow hygiene concerns rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 calliostro |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/config Version ^6.4|^7.0|^8.0 | — | — |
symfony/http-kernel Version ^6.4|^7.0|^8.0 | — | — |
calliostro/lastfm-client Version ^2.1 | — | — |
symfony/dependency-injection Version ^6.4|^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.