dragon-code/support
The package has solid release documentation, tests in the repository, clear licensing, and organizational backing. Recent development is quiet, while workflow actions are not pinned and the repository lacks a security policy.
67%
Total Score
75
100
94
75
Health Score Breakdown
The package has 188 releases since November 2021, but only 2 releases in the last 12 months; the latest release was on April 3, 2026. This indicates established history with a recently slower cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, despite a push in June and a release in April. That recent quiet period lowers confidence in ongoing maintenance capacity.
No repository security policy was found. For a reusable library, this is a transparency gap, though it is not evidence that the release is unsafe.
All 5 workflows were analyzed with no high- or medium-confidence audit findings, and no untrusted checkouts or script injections were found. However, all 9 action references are unpinned and 2 workflows grant top-level write permissions, creating a workflow-hygiene caution without an observed untrusted sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Andrey Helldar |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-message Version ^1.0.1 || ^2.0 | — | — |
voku/portable-ascii Version ^1.4.8 || ^2.0.1 | — | — |
dragon-code/contracts Version ^2.22.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.