carbon/eel
Clear documentation, licensing, and a recent release history make this package easy to evaluate and adopt. Maintenance is concentrated in one recent contributor, while the workflow uses broad write access and unpinned actions.
78%
Total Score
88
100
100
50
Health Score Breakdown
All two recent commits came from one contributor, so day-to-day activity is concentrated. Organization backing partly offsets the handoff risk, but the narrow recent contributor base remains a caution.
The repository has no security policy. That weakens vulnerability-reporting transparency, although it is a moderate hygiene gap rather than evidence that the package is unmaintained.
The only workflow was fully analyzed with no reported audit findings, and its pull_request_target trigger has no untrusted checkout or script-injection sink. However, both action references are unpinned and the workflow grants top-level write access, creating a mild automation-hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jon Uhlmann |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 neos/flow Version ^7.0 || ^8.0 || ^9.0 | — | — |
hidehalo/nanoid-php Version ^2.0 | — | — |
behat/transliterator Version ^1.2 | — | — |
matthiasmullie/minify Version ^1.3 | — | — |
gehrisandro/tailwind-merge-php Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 22 days ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.