ellaisys/aws-cognito
The MIT license, substantial README, release notes, and security policy make adoption easier. All 33 recent commits came from one contributor, and 11 of 12 workflow actions are unpinned; organization backing helps but does not remove those maintenance and build-reproducibility concerns.
78%
Total Score
88
100
100
83
Health Score Breakdown
One contributor made 100% of recent commits, creating a meaningful continuity risk. The organization-owned repository provides some handoff capacity, so this is caution rather than a severe failure.
All four workflows were analyzed with no audit findings or untrusted checkouts, but 11 of 12 action references are unpinned and two workflows grant top-level write permissions. These are build-reproducibility and token-scope hygiene concerns, not severe risks on their own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 EllaiSys |
| Amit Dhongde |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/log Version ^10.0|^11.0|^12.0|^13.0 | — | — |
aws/aws-sdk-php Version ^3.380 | — | — |
illuminate/http Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/view Version ^10.0|^11.0|^12.0|^13.0 | — | — |
symfony/console Version ^6.0|^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.