grasmash/yaml-expander
Usable with caveats: the package is licensed, tested, clearly backed by its matching repository, and the 4.0.0 release includes current security and compatibility work. Maintenance is uneven, with no commits in the last three months and only one release in the last year, while no security policy is published.
72%
Total Score
63
100
94
90
Health Score Breakdown
Only one registry account has publishing access, creating some publishing continuity risk; the matching repository and recent release notes provide partial compensating evidence.
The package has existed since 2017 with 18 releases, but only one release was published in the last year, indicating a slower maintenance cadence.
There were no commits and no active maintainers in the last three months, a meaningful warning about current maintenance despite the recent release and repository push.
The repository has open issues and pull requests, showing an avenue for project activity, but none were opened or closed in the last month.
No repository security policy was found, leaving vulnerability-reporting guidance less transparent; the release's documented dependency and CI security measures partly compensate but do not remove the gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matthew Grasmick |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^2 || ^3 | — | — |
symfony/yaml Version ^6.4.40 || ^7.4.12 || ^8.0.12 | — | — |
grasmash/expander Version ^3.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.