musheabdulhakim/coingecko
It has a clear MIT license, README, tests, changelog, and release notes, while its tiny user base and unpinned workflow actions reduce confidence. Pin v1.0.3 and verify compatibility before upgrading.
61%
Total Score
50
90
50
Health Score Breakdown
The package has four releases since September 2022, but none in the roughly 20 months before the scan; this indicates materially slowed maintenance despite a successful latest release.
The repository recorded zero commits and zero active maintainers in the three months before the scan, supporting the concern that development is currently inactive.
The linked repository has no security policy, which is a transparency gap for a package that handles API credentials and external HTTP requests.
Both workflows were analyzed without trigger or injection findings, but all six action references are unpinned, leaving the build exposed to mutable action versions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mushe Abdul-Hakim |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^2.0 | — | — |
illuminate/config Version ^11.34 | — | — |
php-http/discovery Version ^1.20 | — | — |
psr/http-client-implementation Version * | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.