markocupic/backend-password-recovery-bundle
The package is licensed, documented, tested in the repository, and has recent registry releases. Its absent security policy and limited repository activity provide less evidence of ongoing review.
68%
Total Score
50
100
50
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. Recent registry releases provide some compensation, but the current maintenance signal is weak.
The repository has no published security policy, leaving no clear documented channel or process for reporting security issues in a security-relevant password-recovery component.
The single workflow was fully analyzed with no dangerous triggers, sinks, or audit findings, but all six referenced actions are unpinned, increasing reproducibility and workflow supply-chain risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marko Cupic |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.0 | — | — |
scheb/2fa-bundle Version ^6.0 || ^7.0 | — | — |
contao/core-bundle Version ^5.3 | — | — |
code4nix/uri-signer Version ^1.0 | — | — |
symfony/http-foundation Version ^6.4 || ^7.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.