Document templates for the Fancy document writers: a writer document with {{ tokens }} and JSON directives, plus a declaration of the data it needs. inspect() at save time, validateData() before render, render() to plain writer JSON. No code execution, no includes, bounded everywhere. One spec, three runtimes, held to a shared conformance table.
70%
Total Score
caution
Only one day old with no observed commits yet, and 26 of 27 workflow actions are unpinned.
The package is 1 day old with 3 releases, all published in the last 12 months, so there is little maintenance history yet.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, although the package is only 1 day old.
The repository uses Composer, but the collected signal reports no security scanning tools.
The assessed release is v0.3.0, and the package has not reached a stable major version.
The audit analyzed both workflows without failures, but 26 of 27 action references are unpinned; the only cache-poisoning finding was low confidence in .github/workflows/publish.yml, so it is hygiene rather than a standalone severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
particle-academy/fancy-expr Version >=0.2.0 <2.0 | — | — |
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.