magentron/password_exposed
Tests, a clear README, and a matching source repository support adoption. Maintenance stopped after January 2025, and all seven workflow actions are unpinned; the repository also lacks a security policy.
52%
Total Score
50
92
50
Health Score Breakdown
The package has 27 releases, but none in the last 12 months and its latest release was in January 2025, indicating a long maintenance gap after an initially concentrated release period.
The repository recorded zero commits and zero active maintainers over the last three months, reinforcing the evidence of stopped maintenance rather than merely a quiet release schedule.
The repository has no security policy, a transparency gap for a package that processes password-checking requests. Dependabot and the clean workflow audit provide some compensating security hygiene but do not replace a disclosure process.
All seven analyzed action references are unpinned, which weakens build reproducibility and update safety. The audit found no untrusted checkouts, script injection, or higher-risk findings, so this remains a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Contributors |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/cache Version ^1 || ^2 || ^3 | — | — |
symfony/cache Version ^5.4 || ^6 || ^7.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
psr/http-message Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.