crustum/meta
The package is clearly licensed and includes repository tests, a changelog, and matching documentation. Organization backing and a recent push help offset the single-contributor history, but the project is only 33 days old and its workflow dependencies are not pinned.
72%
Total Score
83
100
88
75
Health Score Breakdown
This is a very young package, released only twice over 33 days, so its long-term maintenance record is not yet established.
Only one commit from one active maintainer was recorded in the last three months; the recent push is encouraging, but the maintenance history is thin.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
The workflow uses read-only permissions and has no reported dangerous audit findings, but all six action references are unpinned, reducing build reproducibility and supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Evgeny Tomenko |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 cakephp/cakephp Version ^5.4 | — | — |
symfony/polyfill-php84 Version ^1.31 | — | — |
crustum/plugin-manifest Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 16 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.