fresh/centrifugo-bundle
Documentation, licensing, and the repository’s tests are in place, with release notes for this version. Pinning every workflow action would reduce build-integrity risk.
70%
Total Score
50
93
75
Health Score Breakdown
The package has existed since May 2020 with 37 releases, but only one release in the last 12 months indicates a slower recent cadence.
No commits or active maintainers were recorded in the last three months, which is a meaningful recent maintenance gap despite the repository being current enough to have a January 2026 push.
The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures undocumented.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 14 action references are unpinned, reducing build reproducibility and supply-chain protection.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Artem Henvald |
| Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 fresh/datetime Version ^5.0 | — | — |
symfony/config Version ~7.4 || ~8.0 | — | — |
symfony/console Version ~7.4 || ~8.0 | — | — |
symfony/validator Version ~7.4 || ~8.0 | — | — |
symfony/http-client Version ~7.4 || ~8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.