gravitymedia/ghostscript
Documentation, tests, licensing, and organization backing provide a solid foundation. The main concerns are stale registry releases, no recent commits, missing security-policy guidance, and unpinned workflow actions.
68%
Total Score
75
100
93
50
Health Score Breakdown
The latest release was published about 2 years and 6 months ago, with no releases in the last 12 months. That is a meaningful maintenance concern despite six releases and a moderate historical interval.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This weakens evidence of ongoing maintenance, although the repository is not archived.
The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a transparency gap for a library that invokes an external binary.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 6 action references are unpinned. That leaves avoidable workflow supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Schröder |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/process Version ^5.0|^6.0|^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.