equidna/bee-hive
Release notes, tests, documentation, and recent publishing provide strong evidence of an active project. CI includes dependency auditing, but its action references are unpinned and the repository lacks a security policy.
70%
Total Score
67
94
75
Health Score Breakdown
The artifact includes an Apache-2.0 license file, but the manifest declares the package proprietary. That mismatch creates licensing uncertainty despite the included license text.
One contributor made all three recent commits, leaving maintenance highly concentrated. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Three commits were made in the last three months, showing recent activity, but all activity came from one maintainer.
The repository has no published security policy. For a multi-tenant infrastructure package, this is a transparency and vulnerability-reporting gap.
The single workflow was fully analyzed with no untrusted checkouts, injection findings, or broad top-level write permissions. However, all six action references are unpinned, weakening build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^12.0 || ^13.0 | — | — |
illuminate/support Version ^12.0 || ^13.0 | — | — |
illuminate/database Version ^12.0 || ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 28 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.