kelvinmo/lightcontainer
A single-person project base and unpinned workflow actions reduce resilience and build reproducibility. Repository tests, a changelog, a clear license, and no install-time scripts provide useful safeguards.
63%
Total Score
50
90
67
Health Score Breakdown
One registry maintainer is a small but credible base for a user-owned project; it increases bus-factor risk without proving abandonment.
The package has had no registry release in more than three years, despite eight releases overall; this materially raises staleness risk, though the repository remains unarchived.
The repository recorded zero commits and zero active maintainers in the last three months, indicating currently inactive development even though the project is not archived.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear for consumers.
All 10 analyzed action references are unpinned, weakening build reproducibility. No dangerous triggers, untrusted checkouts, script injection, or audit findings were reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kelvin Mo |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^1.1 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.