fof/components
Its small dependency footprint, MIT license, and security policy make the package straightforward to evaluate. The organization-backed repository is not archived, but no commits or release activity have appeared for about five years, and both workflow actions are unpinned.
58%
Total Score
50
100
83
100
Health Score Breakdown
The package has four releases since December 2019, but none in the last 12 months and the latest release was in May 2021, indicating prolonged inactivity.
There were zero commits and zero active maintainers in the last three months, consistent with the release history's prolonged inactivity and raising abandonment risk.
There were no new or closed issues or pull requests in the last month, while seven pull requests remain open, suggesting limited recent project follow-through.
The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its two action references are unpinned, leaving them exposed to mutable upstream changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Sevilla Martín |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 flarum/core Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.