dashed/dashed-core
Clear documentation and an established release record provide useful context. Recent repository activity is absent, and two high-confidence workflow findings add maintenance and build-integrity concerns.
62%
Total Score
75
100
83
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance concern despite the frequent registry releases.
All three workflows were analyzed, but two high-confidence findings remain: spoofable actor conditions in the Dependabot auto-merge workflow and an unpinned container image. All four action references are also unpinned, so workflow supply-chain hygiene is a caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Robin van Maasakker |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/dbal Version ^4.1 | — | — |
laravel/horizon Version ^5.29 | — | — |
laravel/sanctum Version ^4.3 | — | — |
google/apiclient Version ^2.0 | — | — |
psr/simple-cache Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 20 hours ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.