clash82/multi-rss-combiner
The repository is intact, named correctly, and has a clear README with Composer tooling. Its single-maintainer setup and absent security policy leave limited resilience for future fixes.
58%
Total Score
50
83
50
Health Score Breakdown
One registry maintainer is consistent with a small individual project, but it leaves little visible redundancy if the maintainer becomes unavailable.
The package has six releases since 2018, but none in the last 12 months and the latest was published about 22 months ago, indicating slowing maintenance.
The repository had no commits and no active maintainers in the last three months, reinforcing the evidence of currently inactive maintenance.
The repository has no security policy, making vulnerability reporting and response expectations less transparent.
All nine analyzed GitHub Actions references are unpinned, which weakens build reproducibility and action supply-chain hygiene; there were no detected dangerous triggers or audit findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Rafał Toborek |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 simplepie/simplepie Version ^1.8 | — | — |
wolfcast/browser-detection Version ^2.9 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.