green-elephpant/carbon-aware
Its small scope, organization backing, clear README, tests, and dependency-light design reduce adoption friction. CI has no reported audit findings, though its action references are not pinned.
56%
Total Score
67
100
86
75
Health Score Breakdown
Only two releases were published, both in May 2024, with no releases in the last 12 months. That limited history and long pause increase abandonment risk for a package still at version 0.0.2.
There were no commits and no active maintainers in the past three months, consistent with a project whose registry releases have also stopped. This materially raises maintenance and abandonment risk.
There were three open issues and two open pull requests, but no new or closed issues or pull requests in the past month. The unresolved work is a modest maintenance concern.
Version 0.0.2 is not a stable major release, so the public API may still change. It is not marked as a prerelease, which provides a small compensating signal.
The single workflow was fully analyzed with no reported findings or untrusted execution paths. However, all 10 action references are unpinned, leaving avoidable supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Carsten Windler |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/simple-cache Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.