italystrap/event
Clear licensing, tests, and release notes support straightforward adoption. The small project has no recent commits, and its CI uses unpinned actions.
60%
Total Score
75
86
50
Health Score Breakdown
The package has only three releases and none in the last 12 months; the latest registry release was in July 2024, indicating a slow or paused release cadence.
There were no commits and no active maintainers in the last three months. Although the repository was pushed more recently, current development activity is not evident.
The linked repository has no security policy, which reduces transparency for reporting and handling security issues.
Version 0.2.1 is not a prerelease, but it remains before 1.0, so its API may still change and the package has not reached mature major-version stability.
All nine analyzed action references are unpinned, weakening build reproducibility. The audit also found high-confidence template-injection patterns, but with no untrusted checkout or dangerous trigger reported, these remain workflow hygiene concerns rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Enea Overclokk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.