jasny/controller
The package is clearly documented, tested, and licensed, which supports dependable integration. Its workflow uses unpinned actions, and the project shows little recent maintenance activity, so future fixes and upkeep are uncertain.
58%
Total Score
50
92
75
Health Score Breakdown
The package has had no release in nearly four years: its latest release was October 14, 2022, with no releases in the last 12 months. Its eight-release history shows prior activity but does not offset the current gap.
There were zero commits and zero active maintainers in the last three months, while the repository was last pushed in June 2023. This is concrete evidence of limited recent upkeep.
The repository has no security policy, leaving no documented channel or process for reporting vulnerabilities. This matters for a web controller library, though the absence is a transparency gap rather than evidence of a vulnerability.
The single workflow was fully analyzed with no reported audit findings or dangerous triggers, but all three action references are unpinned. That is a supply-chain hygiene weakness, not a severe risk by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Arnold Daniels |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ralouphie/mimey Version ^1.0 | — | — |
psr/http-message Version ^1.0 | — | — |
willdurand/negotiation Version ^3.1 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.