ibexa/system-info
The package has a long release history, recent published changes, and four active contributors. Its security policy, tests, licensing, and build tooling add useful confidence, while workflow credential inheritance and unpinned actions warrant review.
88%
Total Score
100
100
100
100
Health Score Breakdown
All eight workflows were analyzed without failed files or untrusted checkouts, but all 20 action references are unpinned and a high-confidence medium-severity secrets-inherit finding exposes credentials to a reusable workflow. The pull_request_target trigger has no matching untrusted sink, so it is not independently dangerous.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ibexa/core Version ~5.0 | — | — |
ibexa/admin-ui Version ~5.0 | — | — |
ibexa/twig-components Version ~5.0 | — | — |
zetacomponents/system-information Version ^1.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.