orchestra/model
The repository has tests, release notes, organizational backing, and a matching package repository. Its workflows leave all six actions unpinned, and the lack of security scanning adds smaller transparency concerns.
57%
Total Score
75
86
75
Health Score Breakdown
The package has 67 releases and a long history, but its latest release was about five years ago and it had no releases in the last 12 months, indicating likely abandonment or a frozen project.
The repository recorded no commits and no active maintainers in the last three months; together with the old latest release, this is a meaningful maintenance concern.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, although the package is backed by an organization and the repository is otherwise present.
Both workflows were analyzed successfully and have no reported audit findings or untrusted triggers, but all six action references are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mior Muhammad Zaki |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravie/dhosa Version ^1.1 | — | — |
orchestra/support Version ^6.0 | — | — |
orchestra/database Version ^6.0 | — | — |
orchestra/contracts Version ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.