hamzi/nativerag
MIT licensing, a substantial README, release notes, repository tests, and a security policy provide useful transparency. The workflow audit is incomplete and all six analyzed action references are unpinned, increasing maintenance and build-reproducibility concerns.
64%
Total Score
50
93
75
Health Score Breakdown
The package is young at 125 days and has 10 releases, but the extremely short median interval indicates a concentrated initial burst rather than an established cadence.
One contributor made 100% of the two recent commits, leaving maintenance dependent on a single active person.
Only two commits were recorded in the past three months, indicating limited recent maintenance activity for a package with a recent rapid release burst.
The sole workflow was not fully audited because one file failed, and all six analyzed action references are unpinned. There were no detected injection sinks or write-scoped top-level tokens, so this is a hygiene and reproducibility concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Hamdy Elbatal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/database Version ^11.0|^12.0|^13.0 | — | — |
symfony/http-foundation Version ^7.0|^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.