jtl/go-prometrics-client
It has clear licensing, tests, release notes, and organization backing. Maintenance has been quiet for three months, and both workflow actions are unpinned; the missing security policy adds a smaller transparency gap.
67%
Total Score
75
100
94
50
Health Score Breakdown
The package has been published since April 2020 with 19 releases and a median interval of about 50 days, but only one release occurred in the last 12 months, indicating slower current activity.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently quiet maintenance.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.
The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its action references are unpinned, weakening build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.12.0 | — | — |
jtl/php-generic-collection Version ^1.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.