erseco/autofirma-intermediate-server
Framework-agnostic PHP implementation of the AutoFirma intermediate server protocol
68%
Total Score
caution
A new package with one active contributor and fully unpinned workflow actions remains a maintenance and build-integrity concern.
Health Score Breakdown
The repository is owned by a user rather than an organization, so the single-contributor maintenance concentration is not visibly offset by organizational backing.
This is a very new package, released only 0 days ago with one release, so there is no established release history or long-term maintenance record yet.
One contributor made all seven recent commits, leaving maintenance dependent on a single person and creating a meaningful continuity risk.
Both workflows were analyzed with no audit findings or untrusted checkouts, but all 7 action references are unpinned and one workflow has top-level write permissions; these are build-integrity and least-privilege cautions without an unsafe trigger or sink.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
| Version | Published | Vulnerabilities |
|---|---|---|
| v1.9.3 | 15 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
Maintainers
 Ernesto Serrano |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.