putyourlightson/craft-blitz-netlify
The package is documented, licensed, and backed by an organization-owned repository with a matching name. Its small scope and clean workflow audit help, but maintenance appears inactive and dependency references are not pinned.
62%
Total Score
83
100
89
83
Health Score Breakdown
The package has had 5 releases since October 2019, but none in the last 12 months and its latest release was in April 2024, indicating a prolonged release gap.
There were no commits and no active maintainers in the last 3 months, consistent with the last push being in April 2024; this is the clearest maintenance concern.
Composer build tooling is present, but no security scanning tools were detected. The missing scanner is a hygiene limitation rather than evidence that the release is unsafe.
The repository has no security policy, reducing transparency for vulnerability reporting and response.
Both workflows were analyzed with no findings or untrusted execution paths, and permissions are scoped in at least one workflow. However, all 4 action references are unpinned, leaving avoidable dependency-substitution risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 craftcms/cms Version ^5.0 | — | — |
league/oauth2-client Version ^2.0 | — | — |
putyourlightson/craft-blitz Version ^5.0 | — | — |
putyourlightson/oauth2-netlify Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.