pabloveintimilla/frekr
The library has a README, tests, a license, and a small runtime dependency footprint. Its workflow audit found no dangerous patterns, but unpinned action use weakens build hygiene.
42%
Total Score
50
100
80
67
Health Score Breakdown
Only one release exists, published in March 2019, with no releases in roughly seven years. This is strong evidence of abandonment risk for a library dependency.
The repository recorded no commits and no active maintainers in the last three months, while its last push was in April 2020. This supports the broader evidence of inactive maintenance.
The repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though the package is small and otherwise has a clear repository.
The latest and only release is 1.0.0-beta, so the package has never reached a stable release. The beta release notes provide some transparency but do not offset its age.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. Its one action reference is unpinned, which is a minor build-reproducibility weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pablo Veintimilla Vargas |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^6.3 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.