coolephp/pipeline
The project has had no release or commits since June 2021, leaving compatibility and fixes uncertain. Its workflows also use an unpinned container image, while licensing, documentation, and repository ownership are clear.
43%
Total Score
75
92
75
Health Score Breakdown
The package runs post-install and post-update Composer scripts, adding installation-time behavior that consumers should account for; no provided signal shows those scripts are unsafe.
This is the only release, published in June 2021, with no releases in the last 12 months; the package has had no demonstrated release maintenance for over five years.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating uncertain ongoing maintenance.
All 9 analyzed action references are unpinned, including a high-confidence finding for an unpinned container image in the PHP CS Fixer workflow. The audit found no untrusted checkouts or script injection, which limits the concern to workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 guanguans |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guanguans/coole Version ^1.0 | — | — |
guanguans/pipeline Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.