involix/sushi
The repository has tests and the package has a clear README, while its small dependency set keeps the surface area modest. Unpinned workflow actions and no security policy add maintenance hygiene concerns.
42%
Total Score
0
100
75
67
Health Score Breakdown
The package has had no release in more than six years, with zero releases in the last 12 months. That strongly raises abandonment risk, although the package is not registry-deprecated.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.
The linked repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these counts provide no visible community signal to offset the inactivity.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a meaningful hygiene gap for a dependency, but not evidence of a vulnerability by itself.
The single workflow was fully analyzed with no findings and no dangerous triggers or untrusted checkouts, but both of its action references are unpinned. That creates a modest build-integrity hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Caleb Porzio |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^5.8 || ^6.0 | — | — |
illuminate/database Version ^5.8 || ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.