dvsa/laminas-config-cloud-parameters
84%
Total Score
healthy
Healthy release with recent maintenance, tests, and organization backing; all workflow actions are unpinned and one installs an ad hoc package.
Health Score Breakdown
A post-install command runs during installation, adding execution-time complexity and a small maintenance concern, though no other evidence indicates it is unsafe.
The repository name does not match the package name and its README does not mention the package, so package-to-repository ownership is less transparent despite the organization match.
No repository security policy was found, which reduces disclosure transparency, but the project does use Dependabot and Snyk scanning.
All three workflows were analyzed without dangerous triggers or script injection, and permissions are scoped in some workflows. However, all 8 action references are unpinned and a high-confidence low-severity finding reports an ad hoc package installation, creating workflow reproducibility and supply-chain hygiene gaps.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/property-access Version ^5|^6|^7|^8 | — | — |
symfony/dependency-injection Version ^5|^6|^7|^8 | — | — |
laminas/laminas-modulemanager Version ^2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 17 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.