nails/module-asset
Tests, a changelog, organizational backing, and two active contributors provide useful maintenance evidence. CI uses seven unpinned actions and the repository has no security policy, leaving avoidable hygiene concerns.
65%
Total Score
100
88
67
Health Score Breakdown
This is the package's only release, published in September 2018, with no releases in the last 12 months; that materially raises version freshness and abandonment concerns despite current repository activity.
The repository has no security policy, leaving disclosure and response expectations undocumented; this is a minor transparency gap rather than evidence of unsafe code.
Version 0.1.0 is not a stable major release, so compatibility and maturity are less established. It is not marked prerelease, which partly offsets the concern.
Both workflows were fully analyzed with no audit findings or untrusted sinks, but all seven action references are unpinned, reducing build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pablo de la Pena |
| Gary Duncan |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 12 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.