helsingborg-stad/composer-dist-package
Organization ownership and included Composer and security tooling provide useful support. Longer-term maintenance and release reliability remain unproven for this newly published package.
60%
Total Score
75
90
50
Health Score Breakdown
Only one registry account has publish access, which creates limited publishing redundancy. The organization-owned repository provides some backing, so this is a moderate concern rather than a severe one.
The package is 0 days old, yet has 23 releases in the first few hours with a median interval of about 1 minute. This suggests an immature or testing-oriented release process rather than established release stability.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but both action references are unpinned and one uses an archived action. These are workflow hygiene and reproducibility concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Thor Brink |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 hours ago
- Created
- 14 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.