carmelosantana/coqui-toolkit-slicedd
A clear README, included tests, and a small dependency footprint make the package straightforward to integrate. Its workflow configuration still needs tighter pinning and narrower release permissions, while recent development activity is absent.
58%
Total Score
50
100
83
67
Health Score Breakdown
This package is 167 days old and has only one release, so its maintenance history is still too short to establish a durable release pattern.
The repository had zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern for a package released only once.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The assessed version is v0.1.0 rather than a stable major release, indicating an early-stage API with higher change risk.
All 10 analyzed action references are unpinned, and one workflow grants top-level write permissions, creating avoidable build and release hygiene risk. The reported cache-poisoning finding is low confidence, so it adds little weight on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Carmelo Santana |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.