keepsuit/liquid
PHP implementation of liquid markup language
65%
Total Score
caution
Active project with good documentation, but this beta has concentrated ownership and a high-confidence workflow finding.
Health Score Breakdown
All 5 workflows were analyzed successfully, but all 13 action references are unpinned, four workflows grant top-level write permissions, and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull_request_target trigger has no untrusted checkout or script-injection sink, which limits the risk.
Two contributors are active, but one made about 88% of recent commits. The organization backing provides some handoff capacity, yet practical activity remains concentrated.
The repository has no published security policy, which leaves vulnerability reporting and response expectations less transparent.
The assessed release is a beta rather than a stable major release, and 30% of recent releases are prereleases, so compatibility risk remains for consumers.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fabio Capucci |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 brick/math Version ^0.14.3 || ^0.15 || ^0.16 || ^0.17 || ^0.18 || ^0.19 || ^0.20 || ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.