hypejunction/hypeseo
Its recent release pace, tests, changelog, and two active contributors provide useful evidence of ongoing work. The missing security policy and fully unpinned workflow actions add transparency and build-reproducibility concerns.
48%
Total Score
83
83
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement named. Recent releases reduce abandonment concerns but do not remove the registry's explicit withdrawal warning.
The repository is owned by a personal GitHub account rather than an organization, so there is no provided organizational backing to offset the package's abandonment status.
The repository has no security policy. That weakens vulnerability-reporting transparency, though it is not evidence of a security defect by itself.
Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or write-wide permissions. However, all 11 action references are unpinned, which weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ismayil Khayredinov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 elgg/elgg Version ~7.0.0 | — | — |
fire015/flintstone Version ^2.0 | — | — |
composer/installers Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.