fingerprint/fingerprint-pro-server-api-sdk
The package is licensed, documented, tested, and released regularly, with six active contributors and security scanning. Its main weaknesses are missing security-policy documentation and many unpinned workflow actions.
84%
Total Score
100
94
67
Health Score Breakdown
The repository name does not match the package name and its README does not mention this package, so the package-to-repository relationship is less directly verifiable; the broader SDK repository context partly explains the mismatch.
The repository has no published security policy, leaving vulnerability reporting and disclosure expectations less transparent.
All eight workflows were analyzed without high-confidence findings or untrusted-checkout/script-injection paths, but 14 of 23 action references are unpinned and three workflows grant top-level write access, creating workflow hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 fingerprint |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^1.7 || ^2.0 | — | — |
guzzlehttp/guzzle Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 8 days ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.