mrpunyapal/nativephp-plugin-turnstile
Repository tooling, tests, documentation, and a security policy are present. Its short history limits confidence, and every GitHub Action reference is unpinned, so future updates deserve scrutiny.
68%
Total Score
50
88
75
Health Score Breakdown
The package has only two releases, published about 17 minutes apart, so there is not yet enough history to establish dependable maintenance or release practices.
The repository shows zero commits and zero active maintainers in the last three months. Because the package itself is only hours old and was pushed recently, this is an early warning rather than evidence of abandonment.
Version v0.1.1 is not a prerelease, but it is still an early 0.x release with no established stability record.
All 4 workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. However, all 8 action references are unpinned, and one workflow has top-level write permissions, creating a moderate workflow-hygiene concern without an observed untrusted trigger.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.0|^8.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 2 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.