millipress/acorn-millirules
The package includes consumer documentation, repository tests, and release notes. Organization backing and dependency scanning help offset its small audience and limited maintenance depth.
76%
Total Score
67
100
75
Health Score Breakdown
One contributor made all three commits in the last three months, leaving maintenance dependent on a single active individual. Organization ownership provides some handoff capacity but does not remove the current concentration.
The repository had three commits in the last three months, so activity is present but relatively light for a young package.
No repository security policy was found. This is a transparency gap, although the package is supported by Dependabot and no other supplied signal indicates a security-process failure.
Both workflows were fully analyzed with no reported audit findings or untrusted checkout and script-injection paths. However, all five action references are unpinned and one workflow grants top-level write permissions, creating avoidable workflow hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Philipp Wellmer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 roots/acorn Version ^4.0 || ^5.0 || ^6.0 | — | — |
millipress/millirules Version ^1.2 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.