edgetelemetrics/timebucket
The package is clearly documented, tested, licensed, and recently released without deprecation. Maintenance is thin between releases, and the workflow uses three unpinned actions with no security policy.
72%
Total Score
50
100
100
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. This is a maintenance concern, although the recent registry release and repository push provide some offsetting evidence.
No repository security policy was found. For a maintained library this reduces transparency around vulnerability reporting, though it is not by itself evidence of abandonment.
The single workflow was fully analyzed, uses read-only permissions, and has no reported dangerous sinks or audit findings. However, all 3 action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 James Lucas |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.