jbuncle/simple-dic
The artifact has a README, tests, and an LGPL-3.0 license, while its small dependency set is straightforward. CI is audited but uses two unpinned actions and the repository has no security policy.
58%
Total Score
50
80
50
Health Score Breakdown
Only two releases exist, with the latest published in February 2022 and none in the last 12 months. This indicates substantial maintenance inactivity for a dependency that may need compatibility updates.
The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, there is no recent development evidence to offset the stale release history.
The repository has no security policy. This reduces transparency and gives consumers no documented process for reporting or handling vulnerabilities.
The single workflow was fully analyzed with no untrusted checkout or injection findings, but both of its two action references are unpinned. That leaves avoidable build-integrity exposure, though it is not a severe risk by itself.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 James Buncle |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.