dhensby/silverstripe-masquerade
Documentation and packaging are in good shape, with tests in the repository and a recorded release for this version. The main concerns are no commits in three months, no security policy, and all 10 workflow actions unpinned.
67%
Total Score
50
100
92
50
Health Score Breakdown
The package has existed for over 10 years, but only one release appeared in the last 12 months and the median release interval is about 16 months. The recent v2.0.0 release provides some evidence of continued maintenance, but cadence is sparse.
There were no commits and no active maintainers in the last three months. The recent release and repository push partly compensate, but current development activity is still limited.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. The README's security section is marked as pending, so this gap is not compensated.
The workflow was fully analyzed and uses read-only permissions, with no untrusted triggers or injection findings. However, all 10 action references are unpinned and two high-confidence low-severity findings install packages outside a lockfile, creating reproducibility and hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dan Hensby |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 silverstripe/framework Version ^6 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.