ibexa/core-search
Recent releases and active work from three contributors support continued maintenance. The organization backing, tests, security policy, and repository tooling are reassuring, while all 13 workflow actions are unpinned and two workflows inherit secrets broadly.
82%
Total Score
100
100
100
83
Health Score Breakdown
All seven workflows were analyzed with no untrusted checkouts or script injection, and none grants top-level write access. However, all 13 action references are unpinned and two high-confidence medium-severity findings show broad secret inheritance, creating avoidable workflow supply-chain and credential-exposure concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ibexa/core Version ~5.0 | — | — |
symfony/yaml Version ^7.4 | — | — |
symfony/config Version ^7.4 | — | — |
symfony/http-kernel Version ^7.4 | — | — |
symfony/http-foundation Version ^7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.