hkyss/evocms-extras
The documentation and release notes are unusually complete for this young package. Its single-contributor maintenance base and fully unpinned workflow actions reduce confidence in long-term resilience.
68%
Total Score
75
92
100
Health Score Breakdown
The package is only 17 days old, with four releases and a median interval of about 2 days. This shows active early development but provides little evidence of sustained maintenance.
One contributor made 100% of the 40 recent commits. The repository is active, but this concentration creates a meaningful continuity risk for a package with a single publisher.
All 8 analyzed action references are unpinned, and one workflow grants top-level write permissions. No untrusted checkout, injection, or high-severity finding was reported, so this is workflow hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 hkyss |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/http Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/view Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/console Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
illuminate/routing Version ^8.0|^9.0|^10.0|^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 22 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.