Package Health

innmind/async

The release is licensed, documented, and actively updated, with a stable 2.2.0 line. Keep ownership and workflow credentials under review because recent work is concentrated in one contributor and all actions are unpinned.

Latest 2.2.0PackagistPackagist

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Repo bus factorcaution

All 12 recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.

Repo toolingcaution

The repository uses Make and Composer, providing build structure, but no security scanning tools were detected.

Security policycaution

No security policy was found, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All six analyzed action references are unpinned, and all three workflows inherit secrets into reusable workflows; one workflow also has top-level write permissions. No untrusted checkout or script-injection path was found, which limits the severity.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Baptiste Langlade

Direct Dependencies

DependencyLast ReleaseScore
innmind/io
Version ~4.2
—
—
innmind/time
Version ~1.0
—
—
innmind/signals
Version ~5.2
—
—
innmind/immutable
Version ~6.0
—
—
innmind/operating-system
Version ~7.3
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
1 year ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform