cultuurnet/cdb
The package has a clear README, tests, release notes, stable versioning, and organizational ownership. Its maintenance has slowed, and all six workflow actions are unpinned; the missing security policy is another transparency gap.
63%
Total Score
75
88
67
Health Score Breakdown
The package has 11 releases over about 12 years, but none in the last 12 months; its latest release was about 13 months ago, indicating slowed maintenance.
There were no commits and no active maintainers in the last 3 months, which is a meaningful maintenance warning despite the repository having been pushed within the past year.
The repository uses Composer and Make, but no security scanning tools were detected, leaving a modest assurance gap.
The repository has no security policy, reducing transparency about vulnerability reporting and maintenance response.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all six action references are unpinned, weakening build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.