ioweb/mariadbhotfix
The module is small and clearly packaged, with a README, release notes, and no install scripts. Repository identity is unclear, maintenance has been inactive for 3 months, and its two workflow actions are unpinned.
58%
Total Score
50
70
75
Health Score Breakdown
The package has existed since December 2020 and released twice in the last 12 months, but only 9 releases overall with a median interval of about 6 months indicates a modest maintenance cadence.
There were 0 commits and 0 active maintainers in the last 3 months. The recent 1.0.9 release provides some counterevidence, but the current lack of activity still raises maintenance risk.
The repository name does not match the package name and its README does not mention the package, so the link's ownership is not clearly established even though the repository contents resemble the module.
The project uses Composer, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of unsafe code.
The workflow was fully analyzed with no reported audit findings or untrusted triggers, and it scopes permissions at job level. However, both workflow action references are unpinned, leaving the build exposed to action changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.