kechankrisna/payway-partner
The package includes clear documentation, repository tests, a changelog, and Composer security scanning. Its workflows use 14 unpinned actions and include high-confidence secret inheritance and ad hoc package installation findings, while the project has no maintenance history beyond its first day.
62%
Total Score
75
100
94
67
Health Score Breakdown
The package and repository are owned by the same individual account, which is coherent but provides no organizational backing or redundancy.
This is the first release, published less than one day ago, so there is no demonstrated release or maintenance track record yet.
The repository has no security policy, leaving disclosure and response procedures undocumented for a package handling partner credentials and API integration.
All seven workflows were analyzed with no untrusted checkout or script-injection findings, but all 14 action references are unpinned and the audit found high-confidence secret inheritance plus ad hoc package installation; the low-confidence cache finding is only a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ke Chankrisna |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^2.0 || ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 hour ago
- Created
- 1 hour ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.