nowo-tech/composer-update-helper
Generates composer require commands from outdated dependencies. Works with any PHP project (Symfony, Laravel, Yii, CodeIgniter, etc.)
62%
Total Score
caution
Active project with strong documentation, but an exposed workflow and fully unpinned actions weaken release-chain confidence.
Health Score Breakdown
All six workflows were analyzed, but all 24 action references are unpinned. The high-confidence template-injection finding is in a workflow with workflow_run and an untrusted checkout, making the release workflow a material supply-chain concern; one workflow also grants top-level write access.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Héctor Franco Aceituno |
| Nowo.tech |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 hours ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.