mindkomm/timmy
The project has a long release history, regular recent releases, and repository tests and release notes. Recent repository commits are absent, while the workflow audit found a high-confidence floating container image and no security policy.
68%
Total Score
75
100
94
75
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months. Although a recent push and release history provide some counterevidence, the current maintenance pause is a meaningful abandonment concern.
Composer is used for the build, but no repository security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so the supported process for reporting and handling vulnerabilities is unclear.
Both workflows were analyzed, with no untrusted checkouts or script injection; however, all four action references are unpinned and a high-confidence finding reports a test workflow using a floating latest container image.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lukas Gaechter |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 timber/timber Version ^2.0 | — | — |
composer/installers Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.