doublesecretagency/craft-cpbodyclasses
The package is small and focused, with clear usage guidance and a current compatibility fix. Its one workflow uses an unpinned action, no security scanning is configured, and recent commit activity is quiet.
76%
Total Score
75
88
100
Health Score Breakdown
The package has existed since 2017, but only 9 releases and 1 release in the last 12 months indicate a deliberately slow maintenance cadence. The recent release partly offsets that concern.
There were 0 commits and 0 active maintainers in the last 3 months. The recent release and repository push provide some compensation, but ongoing development activity is currently quiet.
Composer is used for the build, but no security scanning tools are configured. For a small plugin this is a minor transparency and maintenance gap rather than a severe risk.
The single workflow was fully analyzed with no dangerous triggers or audit findings, and it scopes permissions at job level. Its only action reference is unpinned, which is a minor reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Double Secret Agency |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 craftcms/cms Version ^5.0.0-beta | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.