lesname/resource
Repository tests and Psalm scanning provide useful maintenance confidence. The current work is concentrated in one contributor, and all 15 workflow action references are unpinned, leaving meaningful continuity and build-reproducibility concerns.
68%
Total Score
88
100
88
75
Health Score Breakdown
The artifact omits a README, which weakens consumer guidance for a library, but the repository has tests and uses GitHub Releases; missing package tests and changelog are normal packaging practice.
One contributor made all 12 recent commits, creating a real continuity risk; organization ownership provides some capacity to hand off maintenance but no second active contributor is shown.
No repository security policy was found, leaving vulnerability-reporting expectations unclear, though the project does use Psalm scanning.
Version 0.7.1 is not a stable major release, so the API may still change, although it is not marked as a prerelease and recent releases are stable.
The sole workflow was fully analyzed, uses read-only permissions, and has no detected dangerous sinks or audit findings. However, all 15 action references are unpinned, which weakens build reproducibility and update control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lesname/database Version ^0.5.0 | — | — |
lesname/hydrator Version ^0.4.0 | — | — |
lesname/value-object Version ^0.7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.