quorum/exporter
The package is well documented, tested, licensed, and has no install-time scripts. Unpinned workflow actions and the lack of a security policy weaken release transparency, while organization ownership provides some continuity.
69%
Total Score
83
86
67
Health Score Breakdown
The package has six releases over more than 11 years, with no registry release in the last 12 months and a median interval of about 505 days. Recent repository activity partly offsets the slow publishing cadence, but the release history still raises maintenance concern.
One contributor accounts for all recent commits, creating a meaningful continuity risk. Organization ownership offers some potential handoff capacity, but no second active contributor is shown.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for consumers.
Version v0.2.0 is not a stable major release, so compatibility may still change; however, it is not marked as a prerelease and has no recent prerelease pattern.
The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, script injection, or flagged findings. Both analyzed action references are unpinned, a modest reproducibility and supply-chain hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jesse Donat |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 maennchen/zipstream-php Version ~2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.