helsingborg-stad/media-usage
Organizational backing, release notes, and security scanning support continued ownership. The workflow scopes permissions safely, but its four actions are unpinned and no security policy is published.
68%
Total Score
67
93
67
Health Score Breakdown
The package has existed since September 2018 with 31 releases, but only one release in the last 12 months indicates a slower maintenance cadence.
There were no commits and no active maintainers in the last three months, which is a concrete maintenance concern, though the release and repository timestamps show the project is not abandoned outright.
There are no new or closed issues or pull requests in the last month, while 10 pull requests remain open; this suggests limited recent project throughput.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
The single workflow was fully analyzed, has no untrusted checkout or script-injection findings, and scopes permissions at job level. However, all four action references are unpinned, reducing build reproducibility and supply-chain protection.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nikolas Ramstedt |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.