processmaker/nayra
Recent releases, repository tests, and organization backing provide useful confidence. The missing security policy and four unpinned workflow actions weaken transparency and build hygiene.
68%
Total Score
75
100
100
50
Health Score Breakdown
There were zero commits and zero active maintainers during the last three months. Although the package had a recent release and repository push, the lack of recent commit activity raises abandonment risk.
The repository has 19 open issues, but no new or closed issues and no merged pull requests in the last month. This suggests limited recent maintenance responsiveness.
The repository has no SECURITY.md or other detected security policy. For a process-execution engine, this is a transparency and vulnerability-reporting gap.
The single workflow was fully analyzed with no trigger, sink, or audit findings, but all 4 action references are unpinned. The workflow also lacks a top-level permissions block, which is acceptable on its own, so the main concern is reproducibility of unpinned actions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.