humanmade/cloud
Recent releases, tests, and seven active contributors show ongoing project work. Use altis/cloud instead, because this package is marked abandoned on Packagist.
42%
Total Score
100
88
67
Health Score Breakdown
Packagist marks the entire package as abandoned and names altis/cloud as its replacement. This is a direct adoption concern even though the repository remains active.
The repository has no security policy. That weakens disclosure transparency, although active maintenance and Dependabot provide some compensating evidence.
All seven action references are unpinned, and two high-confidence template-injection findings affect release workflows; one workflow also has top-level write permissions. The pull_request_target trigger has no untrusted checkout or script-injection finding, so this is a hygiene and workflow-risk concern rather than an independent critical verdict.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Human Made |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 maxbanton/cwh Version ^2.0 | — | — |
monolog/monolog Version ^2.11 | — | — |
humanmade/aws-xray Version ~1.3.14 | — | — |
humanmade/batcache Version ~1.5.3 | — | — |
humanmade/cavalcade Version ^2.0.3 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.