phpbb/viglink
It is clearly licensed, has repository tests, and is backed by an organization. One contributor carries all recent commits, and the workflow uses an unpinned action.
62%
Total Score
83
100
88
75
Health Score Breakdown
The latest registry release was published nearly seven years ago, with no releases in the last 12 months. Recent repository activity provides some compensation, but the published package remains stale.
All four recent commits came from one contributor, leaving recent maintenance highly concentrated and increasing handoff risk.
The repository uses Composer, but no security scanning tools were detected. This is a modest transparency gap rather than evidence of unsafe code.
No repository security policy was found, so the process for reporting and handling vulnerabilities is unclear.
The single workflow completed auditing without dangerous triggers, untrusted checkouts, script injection, or audit findings, but its only action reference is unpinned. No top-level permissions block is acceptable here.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 phpBB Limited |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpbb/phpbb Version >=3.2.0-b1 | — | — |
composer/installers Version ~1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.