decodelabs/slingshot
The repository is still connected to an organization and was pushed recently, but it has no security policy and all seven workflow actions are unpinned. The release includes notes and a usable README, while recent registry activity has slowed considerably.
68%
Total Score
75
92
50
Health Score Breakdown
The package has 24 releases over about 2 years and 9 months, but only 1 release in the last 12 months; this indicates a meaningful slowdown, partly offset by recent repository activity.
There were no commits and no active maintainers in the last 3 months, which raises maintenance-risk concerns despite the repository having been pushed within the broader recent period.
No security policy was found in the repository, reducing transparency for reporting and handling vulnerabilities.
The single workflow was fully analyzed with no dangerous sinks or audit findings, but all 7 action references are unpinned, leaving avoidable build-integrity exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tom Wright |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^2.0.2 | — | — |
decodelabs/kingdom Version ^0.2 | — | — |
decodelabs/monarch Version ^0.2 | — | — |
decodelabs/archetype Version ^0.4 | — | — |
decodelabs/exceptional Version ^0.6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.