netresearch/nr-sync
The organization-backed repository has security scanning, a security policy, tests, a changelog, and a clear README. Workflows use read-only permissions and show no audited high-risk findings, though most action references are not pinned.
68%
Total Score
83
100
93
83
Health Score Breakdown
The package has 32 releases since August 2020, but none in the last 12 months and its latest registry release was in February 2025. This raises maintenance and freshness concerns despite ongoing repository activity.
All 16 recent commits came from one contributor, so maintenance currently depends heavily on a single active contributor. Organization backing provides some handoff capacity but does not remove the concentration concern.
All eight workflows were analyzed, use read-only permissions, and produced no audited findings or untrusted checkouts. However, 18 of 19 action references are unpinned, leaving avoidable reproducibility and action-substitution exposure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sebastian Mendel |
| Rico Sonntag |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 typo3/cms-core Version ^12.4 | — | — |
typo3/cms-fluid Version ^12.4 | — | — |
typo3/cms-backend Version ^12.4 | — | — |
typo3/cms-extbase Version ^12.4 | — | — |
netresearch/nr-scheduler Version * | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.