emsifa/evo
The repository has tests, a changelog, matching documentation, a security policy, and clear MIT licensing. Those strengths do not offset the project’s long inactivity and weak CI pinning, which create ongoing maintenance risk.
40%
Total Score
0
83
100
Health Score Breakdown
The package has had no release in nearly five years, with zero releases in the last 12 months. Its earlier 17-release history shows initial activity but does not compensate for the prolonged pause.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating little current maintenance capacity.
All four action references are unpinned, and the audit found a high-confidence unpinned container image in the PHP code-style workflow. The workflows were fully analyzed and have no untrusted checkout or script-injection findings, limiting this to a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Muhammad Syifa |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^8.49 | — | — |
illuminate/support Version ^8.49 | — | — |
illuminate/contracts Version ^8.37 | — | — |
illuminate/validation Version ^8.49 | — | — |
spatie/laravel-package-tools Version ^1.4.3 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.