nowo-tech/vault-bundle
Tests, a clear license, regular releases, and recent commits support adoption. The organization provides continuity despite concentrated contributions, but all workflow actions are unpinned and the CI audit found a high-confidence template-injection issue.
78%
Total Score
100
100
100
88
Health Score Breakdown
All 22 action references are unpinned, and the audit found a high-confidence template-injection issue in a workflow using untrusted checkout; the pull request trigger and checkout make this a real CI hygiene concern, though no script injection was detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Héctor Franco Aceituno |
| Nowo.tech |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/orm Version ^2.15 || ^3.0 | — | — |
symfony/form Version ^7.4 || ^8.0 | — | — |
symfony/yaml Version ^7.4 || ^8.0 | — | — |
symfony/config Version ^7.4 || ^8.0 | — | — |
symfony/routing Version ^7.4 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.