hermajan/booty
The MIT license, clear README, and no install-time scripts make adoption straightforward. A solo maintainer, no security policy, and unpinned workflow actions leave limited operational margin.
63%
Total Score
75
83
75
Health Score Breakdown
The package has made no registry release for over three years, with only five releases overall and none in the last 12 months; this weakens confidence in published maintenance.
All three recent commits came from one contributor, leaving maintenance dependent on a single person and increasing continuity risk.
The repository has no security policy, reducing transparency about how vulnerabilities are reported and handled.
All six analyzed action references are unpinned, and the workflow uses trusted publishing; the audit found no dangerous trigger or untrusted checkout, but these release-hygiene gaps still add supply-chain risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.