ehyiah/ux-quill
The project releases frequently and includes tests, release notes, and security scanning. Maintenance is concentrated in one contributor, while workflow references are all unpinned and publishing workflows have broad permissions; these add dependency risk.
73%
Total Score
75
100
100
75
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the single-contributor maintenance concentration has no demonstrated organizational handoff capacity.
All 55 recent commits came from one contributor, so maintenance and release continuity depend heavily on a single person.
No repository security policy was found, which leaves vulnerability reporting expectations less transparent for users of this integration bundle.
All 15 analyzed action references are unpinned, and two workflows grant top-level write permissions. The audit also found a high-confidence template-injection pattern in the publish workflow, but no untrusted checkout or script-injection trigger was observed, limiting this to workflow hygiene rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matthieu Gostiaux |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/form Version ^6.1|^7.0|^8.0 | — | — |
symfony/translation Version ^6.1|^7.0|^8.0 | — | — |
symfony/twig-bundle Version ^6.1|^7.0|^8.0 | — | — |
symfony/stimulus-bundle Version ^2.9.1|^3.0 | — | — |
symfony/ux-twig-component Version ^2.13|^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.