gosuperscript/axiom-lookup
Frequent releases, three active contributors, tests, release notes, and repository tooling support ongoing maintenance. Check the package's usage terms and pin its workflow actions before relying on it.
78%
Total Score
100
100
81
50
Health Score Breakdown
The manifest declares a proprietary license, with no license file detected in the package or repository. That creates a material adoption and transparency concern for an open-source dependency.
No repository security policy was found. This is a modest transparency gap, though active maintenance and security scanning provide partial compensation.
Version v0.7.0 is not a stable major release, but it is not marked as a prerelease and recent releases contain no prereleases. The pre-1.0 API status is a manageable compatibility caveat rather than abandonment evidence.
The only workflow was fully analyzed with no injection or high-severity findings, but all 4 action references are unpinned. The absence of top-level permissions is acceptable here; unpinned actions remain a supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/csv Version ^9.27.0 | — | — |
league/flysystem Version ^3.0 | — | — |
gosuperscript/axiom Version ^0.6.0 | — | — |
gosuperscript/monads Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 8 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.