netresearch/agent-security-audit
The organization-backed project has two active contributors, a security policy, and strong automated checks. However, one contributor made 94% of recent commits, every workflow action reference is unpinned, and the repository does not identify this package.
76%
Total Score
90
100
94
88
Health Score Breakdown
Recent work is concentrated: one contributor made about 94% of 53 commits, although a second contributor remained active and organization backing provides some handoff capacity.
The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly established by the collected repository evidence.
All 11 workflows were analyzed successfully, use read-only permissions, and have no reported dangerous findings. However, all 14 analyzed action references are unpinned, leaving avoidable workflow supply-chain drift risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Netresearch DTT GmbH |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 netresearch/composer-agent-skill-plugin Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.