decodelabs/spectrum
Documentation and release notes are present, and the repository matches the package. Recent commit activity is absent, while the workflow leaves all seven actions unpinned and the project has no security policy.
72%
Total Score
75
100
88
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months, which raises maintenance and abandonment concerns despite the recent push date.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
No security policy was found in the repository, reducing transparency about vulnerability reporting and response expectations.
The release is not marked prerelease, but the package remains below major version 1, so API stability may still be limited for adopters.
The single workflow was fully analyzed with no high-confidence audit findings or dangerous triggers, but all seven action references are unpinned, weakening build reproducibility and supply-chain controls.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tom Wright |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 decodelabs/nuance Version ^0.2 | — | — |
decodelabs/coercion Version ^0.3.3 | — | — |
decodelabs/exceptional Version ^0.6.1 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.