kitloong/eloquent-power-joins-with-compoships
The repository includes tests, a clear README, release notes for this version, and matching package sources. Workflow references are all unpinned and the project has no security policy, which weakens release hygiene.
64%
Total Score
50
90
50
Health Score Breakdown
The package has only 4 releases since September 2021 and none in roughly 1 year, indicating a small and slow release history. The latest release is recent enough to avoid an abandonment verdict by itself.
The repository recorded 0 commits and 0 active maintainers over the last 3 months, so current maintenance capacity is not demonstrated. The release in this version's history provides some compensating evidence but does not show ongoing activity.
The repository has no security policy, reducing transparency about how maintainers handle vulnerability reports. This is a hygiene gap rather than evidence that the release is unsafe.
Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 5 action references are unpinned, leaving avoidable build reproducibility and workflow supply-chain exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kit Loong |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 awobaz/compoships Version ^2.1 | — | — |
kirschbaum-development/eloquent-power-joins Version ^4.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.