clubdeuce/tessitura
Tests, release notes, and two active contributors provide useful structure. The package is very new, so long-term maintenance is not yet established.
68%
Total Score
100
83
67
Health Score Breakdown
The package is newly published, with all three releases arriving on the same day. That shows activity but provides no meaningful track record for maintenance or release stability.
The repository has no security policy. This is a transparency gap for a library that makes API requests, although it does not by itself make the release unfit to use.
Version 0.1.2 is not a prerelease, but the pre-1.0 version indicates an immature API and should be adopted with some expectation of change.
The workflow audit completed fully and found a high-confidence unpinned container image using the floating latest tag; all seven action references are also unpinned. This weakens build reproducibility and workflow supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daryl |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 php-di/php-di Version ^6.4 || ^7.0 | — | — |
predis/predis Version ^2.3 | — | — |
monolog/monolog Version ^3.7 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.