indiveo/indiveo-oembed
It includes tests, a clear README, minimal runtime dependencies, and organizational backing. The missing license, absent security policy, and unpinned workflow actions reduce transparency and reproducibility.
60%
Total Score
75
100
88
50
Health Score Breakdown
No license is declared, and neither the package nor the repository has a detected license file. This leaves the terms for using the dependency unclear.
The package is 202 days old but has only one release, so there is little release history to demonstrate sustained maintenance.
The repository had zero commits and zero active maintainers in the last three months. With only one package release, this leaves ongoing maintenance capacity unproven.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all four action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.