digitalcz/digisign
The library includes a clear README, release notes, tests, and a recognized MIT license. GitHub Actions uses four unpinned references, and the repository has no security policy, leaving modest process gaps.
88%
Total Score
100
100
100
50
Health Score Breakdown
The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities, though active maintenance and Dependabot partly compensate.
The single workflow was fully analyzed with no dangerous sinks or audit findings, but all four action references are unpinned, weakening build reproducibility and update integrity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Digital Solutions s.r.o. |
| Filip Klouček |
| Pavel Stejskal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.0.1 || ^2.0 | — | — |
psr/simple-cache Version ^1.0 || ^3.0 | — | — |
php-http/discovery Version ^1.13 | — | — |
php-http/multipart-stream-builder Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.