go0sedev/lasso
The package includes tests, a license, and a security policy. Its long-standing inactivity and an unpinned CI container make this release a poor maintenance bet.
42%
Total Score
0
83
100
Health Score Breakdown
The latest release was about four and a half years ago, with no releases in the last 12 months. That strongly indicates abandonment risk despite a history of 39 releases.
The repository recorded no commits and no active maintainers in the last three months, consistent with the prolonged release gap and indicating little current maintenance capacity.
Both workflows were analyzed successfully, with no untrusted checkouts or script injection, but the audit found a high-confidence unpinned container image. This is a supply-chain hygiene concern, not a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sam Carré |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^5.0 || ^6.0 | — | — |
symfony/process Version ^5.0 || ^6.0 | — | — |
illuminate/console Version ^7.0 || ^8.0 || ^9.0 | — | — |
illuminate/support Version 7.0 || ^8.0 || ^9.0 | — | — |
illuminate/filesystem Version 7.0 || ^8.0 || ^9.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.