moffhub/connector-sdk
The workflow has no detected dangerous findings, but all three action references are unpinned and the repository has no security policy or security-scanning tool. A clear README, tests, MIT licensing, and organization ownership provide useful support for adoption.
62%
Total Score
75
100
83
67
Health Score Breakdown
The package has one release in 152 days, so there is little release history from which to judge sustained maintenance. Its young age partly explains the limited history but does not remove the uncertainty.
The repository recorded zero commits and zero active maintainers in the last three months, despite being only 152 days old. This is a meaningful maintenance warning for an SDK.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in an SDK that includes HTTP and webhook helpers. No provided signal compensates for this gap.
Version v0.1.0 is not a stable major release, indicating an early API that may change. It is not marked as a prerelease, which modestly offsets the concern.
The single workflow was fully analyzed with no dangerous triggers, injection findings, or audit findings. However, all 3 of 3 action references are unpinned, leaving avoidable build-supply-chain hygiene risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Moffat Munene |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 moffhub/mps-spec Version ^0.1 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 5 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.