jschreuder/middle-di
Tests, documentation, and release notes make the package straightforward to evaluate. The minimal dependency surface and Composer/Sonar tooling are reassuring, though there is no security policy and workflow actions are unpinned.
68%
Total Score
50
100
93
50
Health Score Breakdown
The package has three releases over about 18 months, with two releases in the last 12 months and a median interval of about 127 days. This shows some maintenance, but the cadence is modest.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was about 10 months ago. This is a meaningful sign of slowing maintenance.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is not evidence of unsafe code by itself.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, all three action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jelmer Schreuder |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.