psfs/core
Security scanning, pinned workflow actions, tests, and a current release support ongoing use. The missing security policy and one workflow installing an unlocked package leave avoidable maintenance and build-hygiene concerns.
68%
Total Score
83
100
67
Health Score Breakdown
All 27 recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization ownership offers some handoff capacity, but no second active contributor is shown.
The repository has no published security policy, reducing transparency about how vulnerability reports should be handled.
Both workflows were fully analyzed, all 10 action references are pinned, and no untrusted checkout or script injection was found. A high-confidence low-severity finding reports an ad hoc package installation, which is a modest reproducibility concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Fran López |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version 3.28.0 | — | — |
psfs/propel Version dev-master | — | — |
symfony/finder Version 7.4.17 | — | — |
monolog/monolog Version 3.11.0 | — | — |
robmorgan/phinx Version 0.16.12 | — | — |
Weekly Downloads
Info
- Last Published
- 9 days ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.