manticoresoftware/buddy-plugin-plugin
The package has tests, a clear license, and a matching organization-owned repository. Its workflow leaves all seven actions unpinned, adding a smaller supply-chain hygiene concern.
12%
Total Score
50
100
50
75
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a direct warning against taking a new dependency on this release.
This is the only release, published over two years ago, with no releases in the last 12 months. The lack of release history reinforces the abandonment concern.
The repository recorded no commits and no active maintainers in the last three months. Together with the archived status, this indicates maintenance has stopped.
The linked repository is archived and was last pushed on January 16, 2024, indicating the source is no longer actively maintained.
The workflow was fully analyzed with no dangerous audit findings, but all seven action references are unpinned. That leaves avoidable build-integrity risk, though it is secondary to the package's abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Manticore Software Co. Ltd |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 manticoresoftware/buddy-core Version v0.1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.