headsnet/collections
The package includes tests, release notes, a matching source repository, and a clear MIT license. Its CI uses nine unpinned actions, and the repository has no security policy. The small project footprint limits evidence of wider adoption.
62%
Total Score
75
100
83
67
Health Score Breakdown
The package has five releases since June 2020, but none in the last 12 months and the latest was in January 2024, indicating stalled maintenance for over two years.
The repository recorded zero commits and zero active maintainers in the last three months, providing no recent evidence of ongoing maintenance.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented; the otherwise complete project structure does not compensate for this governance gap.
Version v0.2.1 is not a prerelease, but the 0.x line and release notes documenting multiple breaking changes indicate that API stability is not yet mature.
The single workflow was fully analyzed with no untrusted checkouts, script injections, or audit findings, but all nine action references are unpinned, weakening build reproducibility and update control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/collections Version >1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.