oxid-esales/graphql-configuration-access
The package is clearly structured for a PHP application and has a small runtime dependency surface. Its workflows use unpinned actions and several archived actions, and no security policy is published.
79%
Total Score
100
100
100
67
Health Score Breakdown
No repository security policy was found. This is a modest transparency gap for a package that exposes configuration access, though the available scanning tooling partly offsets it.
All five workflows were analyzed without failures and have no untrusted checkout or script-injection findings. However, all nine action references are unpinned and four high-confidence archived-action findings indicate workflow maintenance gaps.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Marcel Manzel |
| Anton Fedurtsya |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/dbal Version ^v2.7 | — | — |
oxid-esales/graphql-base Version ^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.