fusio/model
The generated-model package has a clear README, a small dependency surface, and no install-time scripts. Workflow references are unpinned and no security policy is present, so confirm the intended license before adoption.
74%
Total Score
88
100
89
75
Health Score Breakdown
The manifest declares AGPL-3.0-only while the artifact license file is detected as Apache-2.0; although both the artifact and repository contain license files, the mismatch creates real legal ambiguity.
All 8 recent commits came from one contributor, creating concentration risk; organization backing provides some ability to hand off maintenance, but no second recent contributor is shown.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and assurance gap rather than evidence of abandonment.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both of its action references are unpinned, which weakens reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Christoph Kappestein |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psx/record Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.