ostrolucky/stdinho
The repository is identifiable, licensed, tested, and publishes release notes for this version. Its workflow leaves all three actions unpinned, while the single-maintainer project offers limited maintenance depth.
58%
Total Score
50
90
100
Health Score Breakdown
One registry maintainer publishes the package, and the repository is owned by the same individual. This is consistent ownership but provides limited contributor redundancy when recent activity is also absent.
The package has 15 releases since May 2018 with a historical median interval of about 39 days, but no releases in the last 12 months and none since February 2023. This is a meaningful maintenance concern.
The repository had zero commits and zero active maintainers in the last three months. Although it is not archived and was pushed in November 2024, current development activity is absent.
The only workflow was fully analyzed and has no untrusted checkout or script-injection path. However, all three action references are unpinned; the reported low-confidence cache-poisoning finding is hygiene rather than a decisive risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Gabriel Ostrolucký |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version >=2.0 | — | — |
amphp/amp Version ^2.0 | — | — |
amphp/socket Version ^1 | — | — |
symfony/console Version >=4.1 | — | — |
amphp/byte-stream Version ^1.2.5 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.