concretecms/console
It has matching source ownership, MIT licensing, tests in the repository, and release notes for this version. Build and security tooling are present, but workflow image pinning is weak.
48%
Total Score
50
75
Health Score Breakdown
The package has had no releases in the last four years, despite 15 releases overall. This strongly suggests the project is no longer actively maintained.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long period without registry releases.
There were no new or closed issues or pull requests in the last month, while 9 issues and 3 pull requests remain open. This indicates little visible project activity.
All 12 analyzed action references are unpinned, and the audit found a high-confidence high-severity unpinned container image in the Psalm workflow. No untrusted checkout or script-injection path was found to amplify this risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mnapoli/silly Version ^1.7 | — | — |
league/climate Version ^3.5 | — | — |
composer/semver Version ^3.2 | — | — |
symfony/process Version ^3|^4|^5 | — | — |
league/container Version ^3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.