ernestdefoe/roster
Clear licensing, a useful README, and release notes make adoption easier. The small dependency set and clean workflow audit add confidence, though no security policy is documented.
78%
Total Score
100
100
93
50
Health Score Breakdown
The package is very new: all four releases appeared on the same day, so long-term maintenance and compatibility are not yet demonstrated. Recent repository activity partly offsets the maturity concern.
The repository has no documented security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, not evidence of unsafe code.
Both workflows were analyzed cleanly with no audit findings, untrusted checkouts, or script injection; one workflow grants top-level write permissions, which is a mild scope concern without an untrusted trigger.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ernest Defoe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 22 hours ago
- Created
- 25 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.