dotkernel/dot-navigation
Regular releases, thorough tests and documentation, and organizational backing provide useful maintenance evidence. The repository is active in structure, licensed, and covered by a security policy, though its workflow hygiene needs attention.
68%
Total Score
67
94
100
Health Score Breakdown
The repository recorded 0 commits and 0 active maintainers during the last 3 months. This weakens evidence of ongoing maintenance, although the release history shows a recent release.
There are only 3 open issues and no new issues or pull requests in the last month. This is quiet activity, but it is not by itself evidence of abandonment.
The assessed 4.2.0 release is not a prerelease, but the reported latest version is 3.6.0, which conflicts with the assessed release and reduces confidence in this metadata.
All 4 workflows were analyzed successfully with no untrusted checkouts, script injection, or high-severity findings. However, all 9 action references are unpinned, which leaves the build exposed to upstream action changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dotkernel Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0 || ^2.0 | — | — |
dotkernel/dot-helpers Version ^3.7.0 | — | — |
mezzio/mezzio-template Version ^2.9.0 | — | — |
laminas/laminas-escaper Version ^2.13.0 | — | — |
psr/http-server-middleware Version ^1.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.