eugenefvdm/whmcs-api
The project is small and its five workflow action references are all unpinned. Its MIT license, tests, release notes, recent commits, and GitGuardian scanning provide useful safeguards.
82%
Total Score
67
100
100
75
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the project has limited visible institutional backing; recent activity and two contributors partly offset that concern.
Two contributors were active in the last 3 months, but the leading contributor made 80% of commits, leaving maintenance somewhat concentrated.
The repository has no published security policy, which leaves vulnerability reporting and response expectations less transparent.
Both workflows were analyzed successfully and have no reported audit findings or untrusted-trigger sinks. However, all five action references are unpinned, which weakens build reproducibility and action supply-chain protection.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Eugene van der Merwe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spatie/ray Version ^1.41 | — | — |
symfony/dotenv Version ^7.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.