made-by-bramble/craft-ecards
The organization-backed repository matches the package and includes a changelog, which supports traceability. However, it has had no new release since January 2025, lacks a security policy, and uses one unpinned workflow action.
62%
Total Score
100
80
50
Health Score Breakdown
This is the only release, published about 20 months ago, with no releases in the last 12 months; that leaves maintenance continuity uncertain despite the stable 1.0.0 version.
Composer build tooling is present, but no security-scanning tooling was detected, leaving automated security coverage limited.
No security policy was found in the repository, leaving vulnerability-reporting expectations unclear for a package that handles ecommerce-related application functionality.
The single workflow was fully analyzed, scopes permissions at job level, and has no reported sinks or audit findings. Its one action is unpinned, which leaves the build exposed to moving action references.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 craftcms/cms Version ^5.5 | — | — |
craftcms/commerce Version ^5.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.