custom-d/user-security-recovery
The repository includes tests, a changelog, release notes for this version, and read-only workflow permissions. Maintenance has gone quiet for about 20 months, the README still contains placeholder text, and the workflow uses one unpinned action.
64%
Total Score
100
100
80
67
Health Score Breakdown
The artifact has a README and changelog, and this version has GitHub release notes; the repository also contains tests. However, the README still includes placeholder text such as “CHANGE ME,” limiting documentation quality.
The package has 16 releases since April 2021, but none in the last 12 months and the latest release was about 20 months ago, indicating a meaningful maintenance gap.
The linked repository has no security policy, leaving no documented reporting process for a package that handles user security recovery.
The single workflow was fully analyzed, uses read-only permissions, and has no audited findings or untrusted checkout paths. Its one action reference is unpinned, which is a modest reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Craig Smith |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^9.0|^10.0|^11.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.