ibexa/search
Tests, clear licensing, and a security policy add useful safeguards. Recent repository work is concentrated in one contributor, and workflow credential handling and unpinned actions need care.
76%
Total Score
67
100
100
Health Score Breakdown
One contributor made all recent commits, giving the repository a 100% top-contributor share. Organization backing partly reduces handoff risk, but the observed contributor base remains concentrated.
Only 2 commits were recorded in the last 3 months, with activity from just 1 maintainer. This is a meaningful recent-maintenance weakness despite the strong release history.
All 6 workflows were analyzed and none use top-level write permissions, but all 11 analyzed action references are unpinned. A high-confidence medium-severity secrets-inherit finding also indicates credentials are passed to a reusable workflow, so workflow hygiene warrants caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ibexa/core Version ~5.0 | — | — |
symfony/form Version ^7.4 | — | — |
symfony/config Version ^7.4 | — | — |
symfony/serializer Version ^7.4 | — | — |
symfony/http-kernel Version ^7.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.