melbahja/environ
The release is over six years old, and the repository has had no recent commits or active maintainers. A clear README, tests, MIT licensing, minimal dependencies, and no install scripts support adoption, but workflow references remain unpinned and no security policy is present.
58%
Total Score
50
100
88
75
Health Score Breakdown
The latest release was published in July 2020, with no releases in the last 12 months and only three releases overall. That long period without a release lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, while its last push was in October 2021. This indicates maintenance has been inactive for several years.
The repository has no security policy. For a small package this is a transparency gap rather than a severe risk, but it provides no stated process for reporting or handling vulnerabilities.
The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, or reported findings, but all 3 of 3 action references are unpinned. That leaves the build exposed to moving action code and is a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mohamed ELbahja |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.