cpsit/frontend-asset-handler
Clear documentation, a license, release notes, and automated security scanning support adoption. The organization-backed project is active, though its workflow audit and absent security policy leave some room for stronger operational hygiene.
78%
Total Score
88
100
100
75
Health Score Breakdown
Six commits were made in the last three months, showing recent source activity. All were made by one contributor, which is balanced somewhat by the organization-backed project context.
The repository has no SECURITY.md policy. This weakens vulnerability-reporting transparency, although the project does use Sonar scanning as a compensating security practice.
All three workflows were analyzed successfully, all 24 action references are pinned, and no untrusted checkout or script-injection trigger was found. The audit still reports high-confidence template-injection findings in the release workflow and a low-confidence cache-poisoning finding, so release-workflow hygiene warrants attention.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Elias Häußler |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^6.4 || ^7.0 || ^8.0 | — | — |
ergebnis/json Version ^1.0 | — | — |
symfony/config Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/finder Version ^6.4 || ^7.0 || ^8.0 | — | — |
guzzlehttp/psr7 Version ^1.8 || ^2.0 || ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.