nyholm/nsa
The project is small and mature, with a clear README, repository tests, MIT licensing, and a recent release. No commits in the last three months and all 14 workflow actions are unpinned add maintenance and build-reproducibility concerns.
70%
Total Score
50
100
50
Health Score Breakdown
The repository had no commits and no active maintainers in the last three months. The recent release and repository push provide some compensating evidence, but the current activity pause lowers confidence in ongoing maintenance.
The repository has no security policy. This is a modest transparency gap, though the package's small scope and Psalm scanning provide limited compensating evidence.
Both workflows were analyzed successfully with no untrusted checkouts, script injection, or broad top-level writes, but all 14 action references are unpinned, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tobias Nyholm |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 webmozart/assert Version ^1.1.0 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.