Crawlora Google Play API client with 11 endpoints for app search, details, reviews, ratings, permissions, data safety, charts, similar apps, and developers
72%
Total Score
caution
A very new package has strong project documentation but all workflow actions are unpinned and its release workflow installs packages outside a lockfile.
The package is extremely new, with two releases in about one day and no longer-term release record. The rapid initial cadence is positive, but it cannot yet demonstrate sustained maintenance.
Composer build tooling is present, but no security-scanning tool was detected. The repository’s security policy partly compensates for the missing automated scanning.
Version v0.1.1 is not a stable major release, although it is not marked as a prerelease. Consumers should expect the API to remain subject to early-stage change.
All 45 analyzed action references are unpinned, and the release workflow has high-confidence adhoc package installation outside a lockfile; both weaken reproducibility. The audit also reports use-trusted-publishing findings, while the workflows use read-only permissions and have no untrusted checkout or script-injection paths.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.