ramsey/conventional-commits
It has a clear README, release notes, repository tests, an MIT license, and a security policy. Dependency scanning and a complete workflow audit help, though the repository's automation needs maintenance attention.
61%
Total Score
50
93
83
Health Score Breakdown
The project is mature, with releases since 2020, but only one release appeared in the last 12 months; this suggests a slower maintenance cadence rather than abandonment on its own.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of slowed maintenance and increased abandonment risk.
The audit completed for both workflows with no untrusted checkout or script-injection findings, but all 17 action references are unpinned. Five low-confidence cache-poisoning findings are hygiene concerns rather than decisive evidence by themselves.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ben Ramsey |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/console Version ^6.0 || ^7.0 || ^8.0 | — | — |
opis/json-schema Version ^2.3 | — | — |
symfony/filesystem Version ^6.0 || ^7.0 || ^8.0 | — | — |
jawira/case-converter Version ^3.5 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.