naver/pinpoint-php-aop
The package is licensed, documented, tested, and backed by an organization with security scanning and a security policy. Maintenance has gone quiet since October 2024, and its workflow uses an unpinned container image.
62%
Total Score
75
100
88
83
Health Score Breakdown
The package has 20 releases over about six years, but none in the last 12 months and the latest release was in October 2024. This indicates a meaningful maintenance slowdown, though the release history is substantial.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last 12 months, this is the clearest maintenance risk.
The linked repository is not archived, although its last push was in October 2024. Continued availability offsets abandonment concerns somewhat, but does not offset the lack of recent activity.
Both workflows were analyzed successfully with no untrusted checkouts or script injection, but the audit found a high-confidence unpinned container image and all six action references are unpinned. This is a real build-reproducibility and supply-chain hygiene weakness, though no dangerous trigger or broad write permission was observed.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 eeliu |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nikic/php-parser Version ^5.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.