lasselehtinen/woodwing-assets
The package is clearly identified and documented, with repository tests and a clean MIT license. A single owner leaves limited backup if maintenance stops.
61%
Total Score
50
100
100
67
Health Score Breakdown
Only one registry maintainer is listed. Because the repository is user-owned rather than organization-backed, this represents a limited publishing and continuity base.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance warning, although the package released three times in the last year.
The repository has no published security policy, leaving consumers without a stated process for reporting vulnerabilities in an API integration library.
Both workflows were analyzed, but all 3 action references are unpinned. A high-confidence bot-conditions finding and one workflow with top-level write permissions add workflow hygiene risk; no untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lasse Lehtinen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.0 | — | — |
illuminate/contracts Version ^12.0|^13.0 | — | — |
spatie/laravel-package-tools Version ^1.9.2 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.