nekudo/shiny_deploy
Clear licensing, release notes, and a matching source repository improve transparency. The project has no security policy or scanning, and its install hook deserves review.
58%
Total Score
50
50
88
50
Health Score Breakdown
The package declares 16 runtime dependencies, including several extensions and network-facing libraries, which increases operational complexity but is consistent with a deployment application.
The package defines a post-create-project-cmd lifecycle script, so installation can execute package-provided behavior and merits extra review before deployment.
The package has existed since November 2017 with 14 releases, but it has had no release in the last 12 months; the latest release was over a year ago. This lowers confidence in ongoing maintenance.
The repository had no commits and no active maintainers in the last 3 months, reinforcing the concern that maintenance has slowed substantially.
Composer and Robo provide build tooling, but no security-scanning tools are configured, leaving a meaningful transparency and maintenance gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Simon Samtleben |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 apix/log Version 1.3.0 | — | — |
react/zmq Version 0.4.0 | — | — |
lcobucci/jwt Version 5.5.0 | — | — |
cboden/ratchet Version 0.4.4 | — | — |
vlucas/valitron Version 1.4.11 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.