johannschopplich/kirby-hashed-assets
The package has a clear MIT license, a useful README, repository tests, and no install-time scripts. Its small dependency set and release notes help, but the source and registry show no activity since September 2023.
15%
Total Score
0
100
50
100
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement listed. This is a direct warning against taking a new dependency on this release.
The repository had zero commits and zero active maintainers in the last three months, consistent with the package being abandoned rather than actively maintained.
The linked repository is archived, and its last push was on September 28, 2023. An archived project is not positioned to receive maintenance or fixes.
The package has 41 releases since December 2020, but none in the last 12 months; the latest release was September 28, 2023. Earlier release activity provides maturity, but does not offset the prolonged halt.
The single workflow was fully analyzed, but both action references are unpinned and it grants top-level write permissions. The only audit finding was low-confidence cache-poisoning, which is hygiene rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Johann Schopplich |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 getkirby/composer-installer Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.