leafs/csrf
The package includes tests, a README, release notes, and a stable major version. Its main weaknesses are a single active contributor, no security policy, and unpinned workflow actions.
76%
Total Score
83
100
93
67
Health Score Breakdown
One contributor made all 8 commits in the last 3 months, leaving no demonstrated contributor redundancy. Organization backing helps provide continuity, but the observed activity remains concentrated.
The project uses Composer for builds, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene concern, not evidence of unsafe code.
The repository has no published security policy. For a CSRF security component, this makes vulnerability reporting and response expectations less clear.
Both workflows were analyzed successfully and have no untrusted checkouts, script injection, or high-severity findings. However, all 5 referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Michael Darko |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 leafs/http Version ^5.0 | — | — |
leafs/anchor Version ^5.0 | — | — |
leafs/session Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.