Package Health

coldtrick/poll

The stable release history and two active contributors add confidence. The repository lacks a security policy, and all three workflow actions are unpinned, so maintenance hygiene is not perfect.

Latest v14.0.2PackagistPackagist

82%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Repo toolingcaution

Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a modest transparency and hygiene gap rather than evidence of unsafe code.

Security policycaution

No security policy was found in the repository. That makes vulnerability reporting and response expectations less transparent, although recent releases and active contributors partly compensate.

Workflow auditcaution

All three workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings, and none grants top-level write access. However, all 3 of 3 action references are unpinned, leaving avoidable dependency-integrity risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
npm-asset/chart.js
Version ~4.5.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
10 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform