epmnzava/userwallet
The package includes tests, a changelog, an MIT license, and a recent release. Its single maintainer, absent security policy, and weak workflow hardening leave limited operational depth.
66%
Total Score
50
93
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months. This indicates a meaningful maintenance gap despite the January release.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning reduces assurance about ongoing maintenance and release hygiene.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency and maintenance weakness for a package handling wallet functionality.
All 5 workflow action references are unpinned and the only workflow grants top-level write permissions. The audit also reported a low-confidence cache-poisoning finding; these are workflow hygiene weaknesses, but no untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Emmanuel Mnzava |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^2.44 | — | — |
illuminate/support Version ^5.5.44|^6.0|^7.0|^8.0|^9.0|^10.0 | — | — |
Weekly Downloads
Info
- Last Published
- 8 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.