dotkernel/light
The release includes tests, release notes, a security policy, and automated security scanning. Workflow hygiene needs attention because all 14 action references are unpinned, although the only audit finding is low-confidence cache-poisoning.
78%
Total Score
88
100
100
67
Health Score Breakdown
Install and update lifecycle scripts are present, adding execution during project operations; this is a modest supply-chain consideration for an application package but not severe on its own.
All four recent commits came from one contributor, so current maintenance depends heavily on a single active person; organization backing partly reduces handoff risk.
All five workflows were analyzed and no untrusted checkout or script-injection path was found. However, all 14 action references are unpinned, and a low-confidence cache-poisoning finding remains hygiene debt rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Dotkernel Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mezzio/mezzio Version ^3.24.0 | — | — |
mezzio/mezzio-fastroute Version ^3.13.0 | — | — |
dotkernel/dot-errorhandler Version ^5.0.0 | — | — |
mezzio/mezzio-twigrenderer Version ^2.17.0 | — | — |
laminas/laminas-config-aggregator Version ^1.17.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.