mailmug/php_dlib
The MIT license, tests, and release notes improve transparency. The project is young, shows no active maintainers in the last three months, and uses unpinned actions with broad write permissions.
64%
Total Score
50
88
50
Health Score Breakdown
The package is only 153 days old with four releases, including a release today. This shows recent publishing activity but provides little long-term maintenance history.
The repository recorded zero commits and zero active maintainers in the last three months. A repository push accompanying the current release shows recent publishing, but not sustained development activity.
Composer and CMake build tooling are present, supporting a reproducible project structure. No security scanning tooling is configured, leaving a modest transparency gap.
The repository has no security policy. This does not show abandonment, but it gives consumers no documented channel or process for reporting security issues.
The single workflow was fully analyzed and has no detected sinks or audit findings, but all 10 action references are unpinned and the workflow grants top-level write permissions. These are workflow hygiene and token-scope concerns, not severe risks by themselves.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.