defectivecode/mjml
The package includes tests, release notes, a clear license, and a security policy. Recent repository commits are absent, and all five workflow action references are unpinned, leaving moderate maintenance and build-integrity concerns.
78%
Total Score
83
100
100
83
Health Score Breakdown
A post-autoload-dump install-time script is present. This adds some installation complexity, but the signal does not show a dangerous or unusually broad lifecycle action.
The repository recorded zero commits and zero active maintainers in the last three months. A recent release and push partly offset this, but the lack of observed commit activity is still a maintenance caution.
Both workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all five action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Corey McCormick |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.