contributte/console-extra
Clear release notes, repository tests, and organization backing improve transparency. No commits were recorded in the last three months, while all eight workflow actions are unpinned and one workflow inherits secrets, so maintenance and build hygiene need attention.
68%
Total Score
75
83
Health Score Breakdown
The package has existed for about 8 years with 13 releases, but only one release appeared in the last 12 months and the median interval is about 154 days. This suggests established but relatively infrequent maintenance.
The repository recorded zero commits and zero active maintainers in the last three months. Although v0.9.0 was just released, the recent activity window still indicates a thin current maintenance signal.
The repository uses Make and Composer, providing build tooling, but no security-scanning tool was detected. This is a modest hygiene gap rather than evidence of abandonment.
All four workflows were analyzed and none uses an untrusted trigger or script injection, but all 8 of 8 action references are unpinned. A high-confidence medium-severity secrets-inherit finding affects coverage.yml, so workflow supply-chain hygiene warrants caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Milan Felix Šulc |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/di Version ^3.1.8 | — | — |
symfony/console Version ^7.4.0 || ^8.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.