mathiasverraes/money
The release includes a README, changelog, and GitHub release, while the repository is active and has two recent contributors. Workflow images are unpinned, and no security policy is present.
55%
Total Score
100
81
75
Health Score Breakdown
Packagist marks the entire package as abandoned, which is a substantial adoption risk even though the listed replacement is the same package and the source repository remains active.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, making vulnerability-reporting expectations less clear for a library handling financial values.
All four workflows were analyzed without untrusted triggers or script injection, but all 20 action references are unpinned and three high-confidence unpinned-container-image findings were reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mathias Verraes |
| Márk Sági-Kazár |
| Frederik Bosch |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.