kaveraa/api-gouv-publique-fr
The project is only one day old, so its long-term maintenance record is unproven. Documentation, tests in the repository, licensing, security policy, and recent release work provide a solid foundation; pin this version while the project establishes a longer track record.
68%
Total Score
50
100
94
83
Health Score Breakdown
The registry namespace and repository are owned by the same individual account, which is consistent ownership but provides a narrow visible backing base for a new project.
The package is only 1 day old, despite 5 releases in that period, so there is not yet enough history to judge sustained maintenance or release stability.
The repository reports 0 commits and 0 active maintainers in the last 3 months, but the project is only 1 day old; this is mainly an unproven maintenance record rather than evidence of abandonment.
Both workflows were analyzed successfully with no audit findings or untrusted checkout and script-injection paths. However, all 12 action references are unpinned and one workflow grants top-level write permissions, creating a modest supply-chain and token-scope hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Augustin Kavera |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/simple-cache Version ^2.0 || ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 2 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.