hksagentur/kirby-schema
The project is actively publishing and includes substantial documentation and release notes. Its alpha status, license mismatch, one-person recent commit base, and unpinned workflow actions call for extra caution.
68%
Total Score
100
100
83
67
Health Score Breakdown
The manifest declares ISC, while the artifact license file was detected as NCSA, so the package's licensing is inconsistent and should be clarified before adoption.
The repository has no stars or forks and only one watcher, offering little external validation; popularity is supporting evidence rather than a health verdict.
The repository has no security policy, leaving vulnerability-reporting expectations unclear.
This release is an alpha, which signals possible breaking changes despite the package's otherwise active development.
The workflow audit found no dangerous triggers, sinks, or high-severity findings, and its job-level permissions are scoped. However, all four analyzed action references are unpinned, which is a supply-chain hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Daniel Weidner |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 getkirby/composer-installer Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 24 days ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.