moonspot/phlag
The package includes tests, a clear BSD-3-Clause license, and useful documentation. Unpinned workflow actions and no security policy reduce build and disclosure transparency.
84%
Total Score
100
100
50
Health Score Breakdown
The repository has no security policy, which leaves vulnerability reporting and disclosure expectations unspecified. Active maintenance and Dependabot partly offset this transparency gap but do not remove it.
The only workflow was fully analyzed with no detected injection or high-confidence audit findings, but all three action references are unpinned. This weakens reproducibility and supply-chain hygiene without indicating an immediate severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Brian Moon |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.28 | — | — |
dealnews/db Version ^4.1.0 | — | — |
pagemill/router Version ^2.0 | — | — |
dealnews/get-config Version ^2.2 | — | — |
phpmailer/phpmailer Version ^7.1 | — | — |
Weekly Downloads
Info
- Last Published
- 27 days ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.