neunerlei/configuration
It includes a license, README, tests, and changelog, and its repository clearly matches the package. Workflow review found no dangerous sinks, but all eight actions are unpinned and no security policy is present.
12%
Total Score
50
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement listed. This is a direct warning that new projects should not depend on it.
The package has 28 releases since August 2020, but none in the last 12 months and the latest release was on June 8, 2022. This strongly indicates prolonged abandonment.
The source repository is archived, and its last push was on June 8, 2022. Archived source indicates the project is no longer maintained.
The linked repository has no security policy. This is a transparency gap, though it is secondary to the package's abandoned and archived status.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 8 action references are unpinned, leaving avoidable build reproducibility risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Martin Neundorfer |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 marcj/topsort Version ^2.0 | — | — |
psr/container Version ^1.0.0 | — | — |
neunerlei/arrays Version ^3.2.0 | — | — |
psr/simple-cache Version ^1.0 | — | — |
neunerlei/path-util Version ^2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.