infinityloop-dev/graphpinator-nette
The repository has tests, a clear license, and release notes for this version. All nine workflow actions are unpinned, and recent commit activity is absent, so maintenance and build integrity need attention.
62%
Total Score
50
93
50
Health Score Breakdown
The package has 23 releases but none in the last 12 months, and the latest registry release was over two years ago. This is a meaningful maintenance concern despite a previously regular median release interval of about 19 days.
No commits or active maintainers were recorded in the last three months. The repository was pushed more recently, but the observed recent commit inactivity still raises a maintenance concern.
The repository has no security policy. This is a transparency gap, though it is moderated by the presence of Dependabot and does not by itself indicate the package is unfit.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all nine action references are unpinned. The workflow lacks a top-level permissions block, which is acceptable on its own, while unpinned actions remain a supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Václav Pelíšek |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/http Version ^3.0 | — | — |
latte/latte Version ^2.10.8 || ^3.0 | — | — |
tracy/tracy Version ^2.7 | — | — |
nette/caching Version ^3.0 | — | — |
guzzlehttp/psr7 Version ^2.4.3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.