phore/hydrator
The MIT license, included tests, and small dependency set improve transparency, while the lone unpinned workflow reference weakens build hygiene. Organization backing and a recent repository push provide some continuity, but security documentation is absent.
65%
Total Score
75
83
67
Health Score Breakdown
The package has had 4 releases since September 2020, but none in the last 12 months and its latest registry release was in January 2025, indicating a long maintenance gap.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing maintenance despite a later repository push being observed.
The linked repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package with no other recorded security-scanning tooling.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings, but its one action use is unpinned, leaving a modest reproducibility and build-integrity gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matthias Leuffen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phore/core Version * | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.