notedis/statamic-notedis
The package is clearly licensed, documented, and has a small runtime dependency surface. A single publisher and no security policy provide limited transparency, although the repository is active and the package is not deprecated or archived.
61%
Total Score
50
100
100
67
Health Score Breakdown
Only one registry publisher is listed, leaving a thin publishing base; the linked repository is user-owned, so there is no organization backing shown to compensate for that limitation.
The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance concern even though a recent release was published.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that injects a web widget.
No GitHub Actions workflows were present, so there were no workflow risks to identify; this also provides no evidence of automated build or security checks.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Notedis |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 statamic/cms Version ^4.0|^5.0|^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.