konekt/gears
The repository has clear documentation, tests, a changelog, MIT licensing, and organization backing. A single registry maintainer, no security policy, and weak workflow pinning limit transparency and resilience.
68%
Total Score
75
100
94
75
Health Score Breakdown
Only one account has registry publish access. Organization backing and recent publishing partly offset the narrow registry access base, but publishing resilience remains limited.
The repository recorded zero commits and zero active maintainers over the last three months. The recent release and same-day repository push provide some compensation, but sustained development activity is not visible.
Composer is used for builds, but no security scanning tools are reported. For a library, this is a meaningful transparency gap rather than a release-blocking issue.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, or audit findings. However, both analyzed action references are unpinned, which weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Attila Fulop |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 konekt/enum Version ^2.1|^3.0|^4.0 | — | — |
illuminate/support Version ^11.46.2|^12.50|^13.0 | — | — |
illuminate/database Version ^11.46.2|^12.50|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.