kirschbaum-development/paragon
The package has solid tests, clear documentation, release notes for this version, and organizational backing. Its GitHub Actions dependencies are all unpinned and the repository has no security policy, so maintenance and build hygiene deserve attention.
69%
Total Score
75
83
50
Health Score Breakdown
The package has 11 releases over roughly two years, but only 1 release in the last 12 months. The latest release is recent enough to offset abandonment concerns somewhat, while the low recent cadence remains a caution.
The repository recorded 0 commits and 0 active maintainers in the last three months. A recent release provides some evidence of activity, but the current pause lowers confidence in ongoing maintenance.
No repository security policy was found. This reduces transparency for reporting and handling vulnerabilities, although the package has an identified organization owner and a working build workflow.
All 9 analyzed action references are unpinned, which weakens build reproducibility and update control. The workflow audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, keeping this to a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Brandon Ferens |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version >=10.0 | — | — |
symfony/filesystem Version >=6.4 | — | — |
illuminate/filesystem Version >=10.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.