free-elephants/di
The package has clear documentation, release notes, tests in the repository, and a permissive license. Maintenance is recent but sparse, with one active contributor, no security policy, and four unpinned workflow actions.
66%
Total Score
67
90
50
Health Score Breakdown
The package has existed since December 2016 and released twice in the last 12 months, but its median release interval is about 140 days, indicating a measured rather than highly active cadence.
All recent commits came from one contributor, creating maintenance concentration risk. The organization-owned repository provides some backing, but no second active contributor is shown.
Only one commit was made in the last three months, so current maintenance activity is limited despite the recent release.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed and has no dangerous sinks or audit findings, but all four action references are unpinned, weakening build reproducibility and action-update safety.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 samizdam |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1|^2|^3 | — | — |
psr/container Version ^1|^2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.