lcobucci/clock
Its small dependency surface, stable versioning, and clear licensing support straightforward adoption. The repository lacks a security policy, and all 28 workflow actions are unpinned, leaving build hygiene weaker than the otherwise mature project.
81%
Total Score
50
100
94
50
Health Score Breakdown
No commits or active maintainers were recorded in the last 3 months, which is a maintenance caution. However, the package has a recent release and repository push, partly offsetting the concern.
The project uses Make and Composer for builds, showing established build tooling, but no security scanning tool was detected. That is a modest transparency and hygiene gap.
The repository has no security policy. For a small clock abstraction this is not severe, but it leaves vulnerability-reporting expectations undocumented.
All 7 workflows were analyzed successfully with no untrusted checkouts, script injection, dangerous triggers, or audit findings. However, all 28 action references are unpinned, a reproducibility and supply-chain hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Luís Cobucci |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/clock Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.