innis/hubstr-core
Clear documentation, tests, licensing, and a matching repository provide good transparency. The workflow leaves all three actions unpinned and the project has no security scanning; pin v0.2.0 only if accepting pre-1.0 API changes.
67%
Total Score
75
79
75
Health Score Breakdown
The repository is owned by an individual rather than an organization, so there is no demonstrated organizational maintenance buffer; the short registry maintainer list is consistent with that ownership.
The package is only 1 day old with two releases, so it has not yet demonstrated a sustained release or maintenance pattern.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository-hygiene gap.
Version v0.2.0 is pre-1.0, and the package explicitly allows minor versions to change its public API; this raises compatibility risk despite not being a prerelease.
The sole workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all 3 action references are unpinned, which weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 John Innis |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
amphp/amp Version ^3 | — | — |
amphp/log Version ^2 | — | — |
amphp/http Version ^2 | — | — |
latte/latte Version ^3.1 | — | — |
Weekly Downloads
Info
- Last Published
- 12 hours ago
- Created
- 2 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.