orchestra/dusk-updater-api
The repository has tests, recent releases, and a security policy. Organization ownership helps offset the narrow recent contributor base, but workflow pinning remains a maintenance concern.
72%
Total Score
83
100
83
Health Score Breakdown
All four recent commits came from one contributor, creating a narrow recent maintenance base. Organization ownership provides some handoff capacity but does not remove the concentration concern.
All three workflows were analyzed successfully, use read-only permissions, and have no high-confidence audit findings or untrusted execution sinks. However, all 21 action references are unpinned, leaving workflow dependencies exposed to mutable upstream changes.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jonas Staudenmeir |
| Mior Muhammad Zaki |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/process Version ^6.0|^7.0|^8.0 | — | — |
guzzlehttp/guzzle Version ^7.2 | — | — |
orchestra/sidekick Version ^1.0.2 | — | — |
symfony/polyfill-ctype Version ^1.9 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.