decodelabs/nuance
The package has clear licensing, useful documentation, release notes for this version, and no install-time scripts. Its workflow uses unpinned actions and the repository has no security policy, leaving maintenance and build hygiene concerns.
68%
Total Score
75
100
88
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. Although the repository was pushed recently, the lack of observed commit activity lowers confidence in current maintenance.
The project uses Composer build tooling, but no security scanning tools were detected. This is a maintenance and assurance gap rather than evidence that the package is unsafe.
No repository security policy was found, leaving vulnerability-reporting and disclosure expectations undocumented.
Version v0.2.2 is not a prerelease, but the package remains below a stable major version, so API compatibility may still change between releases.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all seven action references are unpinned. The absence of a top-level permissions block is acceptable on its own, while unpinned actions weaken build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tom Wright |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 decodelabs/remnant Version ^0.2 | — | — |
decodelabs/coercion Version ^0.3.5 | — | — |
decodelabs/enumerable Version ^0.2.8 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.