jkphl/micrometa
Its repository has tests and release notes for this version, but the project has had no commits in three months. The workflow leaves all four action references unpinned and has no security policy.
72%
Total Score
50
88
67
Health Score Breakdown
The package has existed since 2013 with 26 releases, but only one release in the last 12 months indicates a slower release cadence.
No commits or active maintainers were recorded in the last three months, which is a meaningful sign of slowed maintenance despite the recent release.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no published security policy, making vulnerability reporting and response expectations less clear.
The workflow was fully analyzed with no dangerous triggers or audit findings, but all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joschi Kuphal |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 mf2/mf2 Version ^0.4 | — | — |
psr/log Version ^1.1|^2|^3 | — | — |
psr/cache Version ^1.0|^2|^3 | — | — |
league/uri Version ^5.0|^6.5|^7.0 | — | — |
ml/json-ld Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.