honda/url-pattern-matcher
The source includes tests, release notes for this version, a matching README, and a valid MIT license. Its workflows complete an audit but use six unpinned actions. The package is small with one runtime dependency.
58%
Total Score
50
100
83
100
Health Score Breakdown
The package has seven releases, but none in more than four years since January 2022. That long release gap materially raises abandonment risk despite the earlier release history.
The repository recorded no commits and had no active maintainers in the last three months, consistent with the long release gap. This weakens evidence of ongoing maintenance.
Both workflows were analyzed without untrusted triggers, injection findings, or excessive permissions, but all six referenced actions are unpinned. The audit is complete, so this is a supply-chain hygiene concern rather than a severe workflow risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Félix Dorn |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.