daikazu/asi-smartlink
The repository includes tests, release notes, and a matching source tree. Unpinned CI actions and no security policy leave weaker safeguards for a package handling API credentials.
60%
Total Score
75
100
79
50
Health Score Breakdown
A post-autoload-dump install script runs during Composer installation. This is a supply-chain-sensitive execution point, though the signal does not show that it performs harmful work.
The package is 104 days old and has only one release, so there is little evidence of sustained maintenance or release stability.
The repository recorded zero commits and zero active maintainers in the last three months. For a package with only one release, this leaves maintenance capacity unproven.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance gap.
The repository has no security policy, leaving no documented path for reporting vulnerabilities in a client that may handle API credentials.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mike Wall |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 saloonphp/saloon Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.