ghostwriter/github-cli
Clear licensing, a security policy, and automated dependency scanning add useful confidence. Maintenance depends on one contributor, and the package remains an early 0.x release.
79%
Total Score
63
93
83
Health Score Breakdown
Only one registry account has publish access. The matching repository is user-owned rather than organization-owned, so there is no provided backing evidence to offset that concentration.
The registry namespace and repository owner match, supporting package identity, but the owner is an individual user rather than an organization.
All 63 recent commits came from one contributor, leaving maintenance and release knowledge concentrated in a single person.
Version 0.1.2 is not a prerelease, but the 0.x major version signals an API that may still evolve and a less mature project.
The workflow audit completed fully, found no untrusted checkout or script-injection paths, and all analyzed action references were pinned. Its top-level write permission is a mild hygiene concern, but no untrusted workflow path reaches it.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nathanael Esayeas |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ghostwriter/shell Version ^0.1.5 | — | — |
ghostwriter/container Version ^7.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 8 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.