m3m0r7/pnl
The package includes tests, substantial documentation, and a matching MIT license. Two contributors made 31 commits in three months, but all 10 workflow actions are unpinned and the project has no security policy or scanning.
78%
Total Score
100
100
94
75
Health Score Breakdown
The project uses build tooling, but no security-scanning tools were detected. This is a modest transparency and maintenance concern rather than evidence of unsafe behavior.
No SECURITY policy was found, leaving vulnerability reporting and response expectations undocumented.
Both workflows were analyzed without audit findings or untrusted triggers, but all 10 action references are unpinned and one workflow grants top-level write permissions. These are workflow reproducibility and least-privilege gaps, though no dangerous sink was detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.