phpolar/storage
Tests, a changelog, and a security policy support continued project care. The package has only one release in the last year, while workflows use unpinned actions and inherit secrets.
60%
Total Score
75
100
94
100
Health Score Breakdown
The package has 23 releases over about 3 years, but only one release in the last 12 months, indicating a notably slower recent cadence.
There were no commits and no active maintainers in the last three months. This is a meaningful sign of slowing maintenance, although the repository was pushed recently enough not to indicate abandonment on its own.
All 10 analyzed action references are unpinned, and eight high-confidence medium-severity secrets-inherit findings show workflows receiving broader credentials than necessary. Four workflows also grant top-level write access, though no untrusted checkout or script-injection paths were found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.