particle-academy/google-sheets-php
Google Sheets for PHP — the service descriptor, its faker, its webhook verification, one class per operation, and a fancy-flow-php executor per node. Plain HTTP on particle-academy/fancy-connector-core; no vendor SDK.
76%
Total Score
healthy
Healthy overall, supported by active releases and an organization-backed repository despite early maturity and workflow gaps.
Health Score Breakdown
The repository has no published security policy. That is a transparency gap for reporting vulnerabilities, although the other maintenance signals show an active project.
v0.4.0 is not a stable-major release, so compatibility may still change before 1.0. It is not marked as a prerelease, which partly offsets that concern.
All 25 analyzed action references are unpinned, and the audit found a high-severity cache-poisoning pattern with low confidence plus a high-confidence ad hoc package install. The workflows use read-only permissions and have no untrusted checkouts or script injection, limiting the overall impact.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Particle Academy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 particle-academy/fancy-connector-core Version >=0.4.0 <2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.