nandan108/attrecord-migrations
The project is young but releases frequently, has 83 recent commits from two active contributors, and includes repository tests, changelog, and security scanning. Its workflows use unpinned actions and include a high-confidence secrets-inherit finding, so release automation deserves review.
78%
Total Score
100
100
93
67
Health Score Breakdown
The repository has no published security policy, leaving disclosure guidance and security ownership less transparent. This is a modest transparency gap, not evidence of unsafe code.
v0.11.0 is not a stable-major release, but it is not marked prerelease and recent releases contain no prereleases. The pre-1.0 version signals API-change risk more than maintenance risk.
All 8 analyzed action references are unpinned, and the audit found a high-confidence medium-severity secrets-inherit issue in release.yml. The workflows otherwise use read-only permissions, have no untrusted checkouts or script injection, and the audit completed fully.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Samuel de Rougemont |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nandan108/attrecord Version ^0.23 | — | — |
Weekly Downloads
Info
- Last Published
- 6 hours ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.