rennokki/befriended
A clear README, tests, matching repository, and Apache-2.0 licensing make integration straightforward. The repository is not archived and has Dependabot, but its workflow uses four unpinned actions and lacks a security policy.
56%
Total Score
75
100
94
67
Health Score Breakdown
The package has 36 releases since 2018, but none in the last 12 months and the latest release was published in February 2022. That long release gap is a meaningful maintenance concern.
There were zero commits and zero active maintainers in the three months before collection. Together with no releases in the last year, this supports a concern about current maintenance capacity.
The repository has no security policy, leaving vulnerability-reporting expectations less transparent for a package intended for application integration.
All four analyzed action uses are unpinned, weakening build reproducibility. The reported cache-poisoning finding has low confidence and is hygiene rather than a severe risk on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alex Renoki |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/dbal Version ^2.10|^3.3 | — | — |
illuminate/support Version ^8.83|^9.0.1 | — | — |
illuminate/database Version ^8.83|^9.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.