customergauge/cognito
Tests, a clear README, MIT licensing, and release notes support straightforward use. However, no commits or releases have appeared for about two years, and the repository lacks a security policy.
58%
Total Score
50
100
88
50
Health Score Breakdown
The package has six releases since October 2020, but none in the last 12 months and the latest was published about two years ago, indicating slow maintenance.
The repository recorded zero commits and zero active maintainers in the last three months; this is meaningful abandonment risk for a library that may need compatibility updates.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in an authentication-related package.
The single workflow was fully analyzed with no audit findings or untrusted execution paths. Its one action is unpinned, which is a minor reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marco Deleu |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/contracts Version >=7.1 | — | — |
web-token/jwt-library Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.