ernestdefoe/sheaf
Documentation and release notes make the feature easy to evaluate. Its very recent first release and single publisher leave maintenance continuity unproven; the workflow audit is clean overall, though one workflow grants broad write access.
72%
Total Score
50
100
93
67
Health Score Breakdown
One registry maintainer is a thin publishing base, and no organizational backing is shown; this leaves a higher continuity risk if that maintainer becomes unavailable.
This is a brand-new package with one release published today, so there is no release history from which to judge continuity or response to issues.
The repository has no security policy, leaving vulnerability reporting and disclosure expectations unclear for a package intended to run in a Flarum application.
Both workflows were analyzed successfully with no audit findings, untrusted checkouts, or script injection. One workflow has top-level write permissions, a mild hygiene concern without an untrusted trigger or sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ernest Defoe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 16 hours ago
- Created
- 16 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.