locr-company/progress
Tests, a changelog, MIT licensing, and read-only workflow permissions support transparent maintenance. Four of seven action references are unpinned, and no security policy is published.
67%
Total Score
50
100
94
67
Health Score Breakdown
The package has had no release in nearly two years and none in the last 12 months, which weakens confidence in ongoing maintenance despite its five-release history.
There were zero commits and zero active maintainers in the last three months, indicating a recent pause in development even though the repository was pushed in June 2026.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear.
All two workflows were analyzed and both use read-only permissions with no high- or medium-severity findings. However, four of seven action references are unpinned, leaving some workflow supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ringo Leese |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.