davwheat/custom-sidenav-links
The package is licensed, documented, and has one runtime dependency. Its workflow leaves all eight actions unpinned, while maintenance has stopped; adopt only if this older extension fits your needs without expecting updates.
45%
Total Score
25
100
86
67
Health Score Breakdown
The latest release was in October 2021, with no releases in the last 12 months despite the package being over five years old. This materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating little current maintenance capacity.
There were no new or closed issues or pull requests in the last month, while three issues and eight pull requests remain open. This suggests unresolved project activity rather than active upkeep.
The linked repository has no security policy. This is a transparency gap for reporting vulnerabilities, although the package has a valid license and no other provided security-policy evidence compensates for it.
The only workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all 8 of 8 action references are unpinned. That weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Wheatley |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^v1.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.