nicolasbonnici/pawl
The package is documented, licensed, tested in its repository, and has no install-time scripts. Its single release and lack of recent commits weaken confidence in ongoing maintenance, while missing security scanning and unpinned workflow actions add hygiene concerns.
56%
Total Score
50
88
100
Health Score Breakdown
Only one release exists, published about 1 year and 7 months ago, with no releases in the last 12 months. This provides little evidence of sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months, which is concerning alongside the single-release history and suggests uncertain ongoing support.
Composer build tooling is present, but no security scanning tools were detected. This is a transparency and maintenance gap, not evidence that the package is unsafe.
The sole workflow was fully analyzed with no dangerous triggers or audit findings, but all 4 action references are unpinned. That leaves avoidable workflow reproducibility and maintenance risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/socket Version ^1.9 | — | — |
guzzlehttp/psr7 Version ^2.0 || ^1.7 | — | — |
ratchet/rfc6455 Version ^0.3.1 | — | — |
evenement/evenement Version ^3.0 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.