componenta/policy-app
The repository is recently maintained, tested, and backed by an organization. All workflow references are unpinned, and no security policy or scanning is present, so this compatibility release needs extra care.
55%
Total Score
83
86
75
Health Score Breakdown
The package includes a substantial README, tests, and release notes for this version, but the README explicitly directs users to remove this deprecated compatibility package and depend on componenta/policy instead.
All 12 recent commits came from one contributor, creating concentration risk; organization ownership provides some ability to hand maintenance off.
Composer build tooling is present, but no security-scanning tooling was detected, leaving automated security coverage unshown.
No repository security policy was found. This is a transparency gap, though the package's small scope and read-only workflow permissions reduce its significance.
The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous findings, but all 5 action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 componenta/config Version ^3.0.0 | — | — |
componenta/policy Version ^3.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.