particle-academy/fancy-passkeys
The package has clear documentation, tests, a changelog, and an active organization-backed project. Its early v0 development and unpinned workflow actions leave more maturity and build-integrity risk than an established dependency.
72%
Total Score
100
100
79
100
Health Score Breakdown
The package is only 46 days old with three releases and a median interval of about 4 days, showing active early development but limited history for judging durability.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest gap in automated security hygiene.
Version v0.2.1 is not a prerelease, but the major version is still 0, so compatibility and API stability remain less established than for a mature 1.x release.
Both workflows were analyzed successfully and use read-only permissions, with no untrusted checkout, injection, or audit findings. However, all four action references are unpinned, weakening reproducibility and build-integrity controls.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Particle Academy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 web-auth/webauthn-lib Version ^5.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.