imanilchaudhari/yii2-currency-converter
Clear licensing, useful documentation, repository tests, and a published release note make the package transparent to consumers. Dependabot and a clean workflow audit add safeguards, although the build relies on five unpinned actions. The quiet recent development record and absent security policy warrant monitoring.
72%
Total Score
50
100
92
67
Health Score Breakdown
The package is mature, with releases since 2015 and a release within the last year, but only seven releases overall and one release in the last 12 months indicate a slow cadence.
There were no commits and no active maintainers in the last three months, indicating currently quiet development despite the recent release.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, or audit findings, but all five action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Anil Chaudhari |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/yii2 Version ^2.0 | — | — |
yiisoft/yii2-httpclient Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.