creativeorange/gravatar
The package has a clear MIT license, a long release history, and a matching repository with release notes for this version. No commits were recorded in three months, while one maintainer, missing security policy, and broad workflow permissions add maintenance and build-hygiene concerns.
68%
Total Score
83
100
100
50
Health Score Breakdown
No commits and no active maintainers were recorded in the last three months. The recent release and pull-request activity partly offsets this, but the lack of direct commit activity remains a maintenance concern.
The repository has no security policy. This is a transparency gap for reporting and handling vulnerabilities, though it is not evidence that the package is unsafe on its own.
The single workflow gives every job a top-level write-capable token and uses one unpinned action. The audit found no untrusted checkout, script injection, or other actionable findings, so this is a mild hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jaco Tijssen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^5|^6|^7|^8|^9|^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.