infocyph/webrick
The release is recent, documented, licensed, and backed by active repository work. CI hygiene needs attention, and all recent commits come from one contributor despite organization ownership.
67%
Total Score
83
100
94
83
Health Score Breakdown
All 651 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is visible, leaving a real continuity risk.
The repository has only 1 star and 1 fork, so external adoption evidence is limited, though popularity is supporting evidence rather than a health verdict.
The audit analyzed both workflows completely and found no untrusted checkout, script-injection sink, dangerous trigger, or top-level write permissions. However, all 20 action references are unpinned, and high-confidence template-injection findings require CI hygiene work even though no corroborating dangerous trigger was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Infocyph |
| abmmhasan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0.2 | — | — |
psr/cache Version ^3.0 | — | — |
infocyph/intermix Version ^11.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 hours ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.