quasarstream/srtp
The project includes tests, a changelog, release notes, a license, and a security policy. Its single release over 494 days ago and three unpinned workflow actions leave maintenance and build-integrity concerns.
62%
Total Score
90
75
Health Score Breakdown
The package defines pre-install and pre-update scripts, which can perform actions during dependency operations and deserve scrutiny. The signal does not show that these scripts are harmful, so this is a limited concern.
There has been only one release, first published 494 days ago, with no releases in the last 12 months. That limits evidence of ongoing maintenance, though the repository is not archived.
The workflow was fully analyzed and uses read-only permissions with no dangerous triggers or findings, but all 3 of 3 action references are unpinned, weakening build reproducibility and update control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Amin Yazdanpanah |
| Sana Moniri |
| Quasar Stream Community |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 quasarstream/mixin Version ^1.0 | — | — |
quasarstream/exception Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.