joetjen/cooper-config
Loads an application's CASC configuration once, at startup, with joetjen/cooper -- converted into plain PHP values, secrets handled by a per-application policy, compiled to an opcache-friendly PHP file between requests.
72%
Total Score
caution
A brand-new v0.1.0 release with no established history and unpinned workflow actions limits confidence.
Health Score Breakdown
This is the first and only release, published 0 days ago, so maintenance history and release consistency cannot yet be demonstrated.
The repository has no published security policy, leaving vulnerability reporting expectations unclear; this is a transparency gap for a configuration and secrets-related library.
Version v0.1.0 is an early major version, which signals a less mature API even though the registry does not mark it as a prerelease.
All three workflows were analyzed without high-confidence findings, and two use read-only permissions, but all 8 action references are unpinned and one workflow has top-level write permissions. These are workflow hygiene risks, not a severe issue by themselves.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jan Oetjen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 joetjen/cooper Version ^0.1 | — | — |
symfony/console Version ^6.4 || ^7.0 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 22 hours ago
- Created
- 22 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.