dbt/moneris-api
The project has limited security process and its only workflow uses two unpinned actions. Recent release activity, clear documentation, tests in the repository, and a matching source project provide useful maintenance evidence.
70%
Total Score
75
100
93
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. The recent release history partly offsets this, but the current development pace is still a maintenance concern.
Composer is used as the build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance-process gap.
The repository has no SECURITY.md or other declared security policy. For an API client handling payment integrations, this leaves the reporting and response process unclear.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, so their versions can change outside the repository's control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Craig Paul |
| Daniel S. Deboer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.5|^7.5 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.