phppkg/jenkins-client
All eight workflow actions are unpinned, and the repository has no security policy. The package is licensed, tested, documented, and backed by an organization, which offsets some transparency and maintenance concerns.
62%
Total Score
75
92
50
Health Score Breakdown
The latest release was in November 2023, with no releases in the last 12 months and only three releases overall. This indicates a potentially aging release line, though the repository was pushed more recently.
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance. The recent repository push recorded elsewhere provides some compensation but does not show sustained activity.
The repository has no security policy, leaving vulnerability reporting and response expectations unclear. Dependabot and Codacy scanning provide some compensating security tooling.
All 8 analyzed action references are unpinned, creating avoidable build-reproducibility and action-update risk. No untrusted checkouts, script injection, high-severity findings, or incomplete audit were reported, so this is a hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 inhere |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 toolkit/stdlib Version ^2.0 | — | — |
phppkg/http-client Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.