localgovdrupal/localgov_sa11y
Organization backing and a matching source repository provide useful ownership context. The missing security policy and unpinned workflow dependency add smaller transparency and build-hygiene concerns.
46%
Total Score
50
75
75
Health Score Breakdown
The package has had no release in about 20 months, despite 11 releases since October 2022; this prolonged pause materially raises abandonment risk.
There were no commits or active maintainers in the last three months, reinforcing the concern created by the long release gap.
The repository has no published security policy, leaving vulnerability-reporting expectations and response ownership unclear.
The assessed release is still a beta, and all recent releases are prereleases, so compatibility and long-term support remain less certain.
The workflow audit completed cleanly with no dangerous findings, but its one action reference is unpinned; the workflow also lacks a top-level permissions block, which is acceptable on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mark Conroy |
| Maria Young |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.