nystudio107/changelog
The source repository matches the package and includes release notes and a security policy. It has no detectable license, no recent commit activity, and two unpinned workflow actions.
55%
Total Score
75
70
75
Health Score Breakdown
The package has had no registry release in over six years: all 17 releases were published in 2020. That long inactivity raises abandonment risk despite the package not being deprecated.
No declared license, license file, or repository license file was detected. This creates a concrete adoption and redistribution concern for an open-source dependency.
The repository had zero commits and zero active maintainers in the three months measured. Combined with the old registry release history, this supports a meaningful maintenance concern.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both of its two action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bram Devries |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/commonmark Version ^1.0 | — | — |
symfony/dom-crawler Version ^3.0.0 | — | — |
symfony/css-selector Version ^3.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.