prosembler/nitro-porter
Documentation, release notes, tests in the repository, and a clear AGPL license make this project transparent to consumers. Maintenance is active, but nearly all recent commits come from one contributor and all five workflow actions are unpinned.
78%
Total Score
83
94
83
Health Score Breakdown
One contributor made about 99.6% of the 226 recent commits, leaving maintenance highly concentrated despite a second contributor remaining active.
Composer build tooling is present, but no security scanning tooling was detected; this is a modest transparency and maintenance gap.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all five action references are unpinned, which weakens build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lincoln Russell |
| Ryan Perry |
| Todd Burry |
| Alexandre Chouinard |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 adhocore/cli Version ^1 | — | — |
monolog/monolog Version ^3 | — | — |
s9e/text-formatter Version 2.15.* | — | — |
illuminate/database Version ^11 | — | — |
staudenmeir/laravel-cte Version ^1 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.