humanmade/analytics
The repository is organization-backed and includes release notes and a README. Workflow references are all unpinned, and the declared GPL-2.0 conflicts with the detected GPL-3.0 license file.
42%
Total Score
75
67
Health Score Breakdown
Packagist marks the entire package as abandoned and names altis/analytics as its replacement. This is a substantial adoption risk even though the linked repository is not archived.
A license file is present, but its detected GPL-3.0 text conflicts with the manifest declaration of GPL-2.0. This creates a material licensing ambiguity for adopters.
The registry shows no releases in the last 12 months, with the latest registry release dated July 2023. The package has a long release history, but current registry maintenance is stale.
The repository had no commits and no active maintainers in the last three months. Its later push history does not demonstrate ongoing recent development in this measurement period.
All 6 analyzed action references are unpinned, and the audit found two high-confidence template-injection findings plus an adhoc package installation. The pull_request_target workflow has no reported untrusted checkout or script-injection sink, limiting the immediate severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Human Made Limited |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 humanmade/hm-gtm Version ^2.1.1 | — | — |
altis/aws-analytics Version ~4.6.16 | — | — |
altis/analytics-integration-segment Version ~0.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.