dicebear/styles
The package is clearly documented and actively published, with organization backing and a security policy. Its prerelease status, single-contributor activity, and unpinned workflow dependencies warrant pinning this exact version and watching future releases.
78%
Total Score
88
86
100
Health Score Breakdown
All 74 recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving maintenance concentrated.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency gap for supply-chain oversight.
This release is a prerelease, and 65% of recent releases were prereleases, so consumers should expect some change risk despite the stable major line.
Both workflows were analyzed without untrusted-checkout or script-injection findings, but all 26 action references are unpinned and the test workflow installs a package outside its lockfile. The cache-poisoning finding is low confidence, so it is only a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 26 days ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.