luyadev/luya-privacy
Tests, a clear license, and a small dependency surface reduce adoption friction. Missing security guidance and unpinned workflow actions leave maintenance and build integrity less transparent.
57%
Total Score
50
100
83
50
Health Score Breakdown
The latest registry release was published in May 2022, with no releases in the last 12 months; this long gap materially raises abandonment risk despite a previously established release history.
The repository recorded no commits or active maintainers in the last three months, although it was pushed in February 2024; this indicates currently weak maintenance activity rather than a fully abandoned repository.
The linked repository has no security policy, leaving vulnerability reporting and maintainer response expectations undocumented.
The single workflow was fully analyzed with no dangerous audit findings or untrusted checkout paths, but both analyzed actions are unpinned, weakening build reproducibility and supply-chain transparency.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Basil Suter |
| Alex Schmid |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.