Package Health

infinri/ase

Automated Security Evaluator -- CVE monitoring for Magento / Adobe Commerce / Mage-OS stores. Polls KEV/NVD/GHSA/OSV/Packagist, prioritizes with CVSS+EPSS+KEV, alerts via Slack.

Latest v1.0.0PackagistPackagist

68%

Total Score

caution

Usable with caveats: only one release and no commits in the last three months limit maintenance evidence.

Health Score Breakdown

Project backingcaution

The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is limited evidence of institutional backing.

Release historycaution

The package is 154 days old with only one release, so there is little release history from which to judge sustained maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, weakening evidence of ongoing maintenance despite a recent push timestamp.

Workflow auditcaution

The sole workflow was fully analyzed with no untrusted triggers, injection findings, or high-severity issues. Both action references are unpinned, leaving a modest supply-chain hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Lucio Saldivar

Direct Dependencies

DependencyLast ReleaseScore
composer/semver
Version ^3.4
—
—
monolog/monolog
Version ^3.10
—
—
vlucas/phpdotenv
Version ^5.6
—
—

Weekly Downloads

Info

Last Published
5 months ago
Created
5 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform