hmdev1/entrust
The repository has tests and security tooling, but six workflow actions are unpinned and no security policy is published. Its broad runtime dependency set adds upgrade surface.
57%
Total Score
50
50
94
50
Health Score Breakdown
The package declares 49 runtime dependencies, creating substantial upgrade and compatibility surface for a package with only one release.
The package is maintained under a user-owned repository, so the short registry maintainer context is not independently reassuring; no organization backing was observed.
This package has only one release, published 145 days ago, so its maintenance and release track record are not yet established.
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance after the initial release.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a minor transparency gap rather than a dependency-blocking risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0.0 | — | — |
psr/cache Version ^3.0.0 | — | — |
psr/clock Version ^1.0.0 | — | — |
brick/math Version ^0.14.2 || ^0.15 || ^0.16 || ^0.17 | — | — |
symfony/yaml Version ^7.2 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.