dotkernel/dot-controller
The project has a recent release, tests, documentation, and security policy. All nine workflow actions are unpinned, while the repository recorded no commits in the last three months; the recent release partly offsets that maintenance lull.
79%
Total Score
88
100
100
100
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. The release on November 3, 2025 shows recent project activity, but does not fully remove the short-term maintenance concern.
All four workflows were analyzed successfully with no trigger-sink findings or audit findings. However, all nine analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene; the absence of top-level permissions blocks is not concerning on its own because no workflow has top-level write permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dotkernel Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0 || ^2.0 | — | — |
dotkernel/dot-event Version ^4.0.0 | — | — |
mezzio/mezzio-helpers Version ^5.8.0 | — | — |
mezzio/mezzio-template Version ^2.4.0 | — | — |
laminas/laminas-servicemanager Version ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.