domainflow/core
Clear licensing, tests, and recent release notes make the package transparent. Maintenance depends on one recent contributor, and all 25 workflow actions are unpinned.
72%
Total Score
83
100
94
75
Health Score Breakdown
All 17 recent commits came from one contributor, creating a meaningful continuity risk. Organization backing provides some handoff capacity, but no second active contributor is shown.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.
This is a non-prerelease release, although the package remains below major version 1 and may still have API churn.
The workflow audit completed cleanly with no untrusted checkouts or script injection, but all 25 action references are unpinned, weakening build reproducibility and supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 DomainFlow |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^7.4.12 || ^8.0.12 | — | — |
domainflow/container Version ^0.2.2 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.