moovly/moovly-php-sdk
The repository lacks a security policy, and its workflows use an unpinned container image. A clear README, changelog, MIT license, organization backing, and matching source repository provide useful transparency.
45%
Total Score
50
86
50
Health Score Breakdown
The package has 39 releases since May 2018, but its latest release was in December 2022 and it had no releases in the last 12 months. This long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the multi-year release gap and indicating no observed maintenance.
The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it is a secondary concern compared with the lack of recent maintenance.
Both workflows were analyzed successfully, with no untrusted checkout or script-injection findings, but the audit found a high-confidence unpinned container image and all three action references are unpinned. This is a meaningful build-reproducibility and supply-chain hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 NielsCor |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.3|^7.0 | — | — |
nicmart/string-template Version ^0.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.