endroid/data-sanitize
The package is small but clearly licensed, has repository tests, and its source tree matches the package. Visible oversight is limited by a quiet recent period, no security policy, and unpinned workflow actions.
67%
Total Score
50
100
88
83
Health Score Breakdown
The package has existed for about 9 years with 44 releases, but only one release appeared in the last 12 months, indicating a quiet current cadence.
There were no commits and no active maintainers in the last 3 months, which weakens evidence of ongoing maintenance.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so there is no documented reporting path or disclosure process for vulnerabilities.
The workflow audit completed fully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 5 referenced actions are unpinned, reducing build reproducibility and increasing dependence on moving action tags.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jeroen van den Enden |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.