roadiz/skeleton
Healthy and suitable to use. It has frequent stable releases, active repository maintenance, clear documentation, tests, and organization backing; the main caveats are limited recent contributor depth and missing repository security-policy and workflow permission declarations.
87%
Total Score
100
100
94
80
Health Score Breakdown
The repository uses Make and Composer build tooling, but reports no security-scanning tool. That is a minor transparency gap, not a severe risk given the active releases, tests, and clean workflow analysis.
No security policy was found in the repository, leaving vulnerability-reporting expectations unclear. This is a modest transparency gap rather than evidence of abandonment.
The single workflow does not declare top-level token permissions. Although it declares no top-level write access and shows no other dangerous workflow pattern, explicit least-privilege permissions would provide better CI hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/flex Version * | — | — |
roadiz/cms-pack Version ^3.0 | — | — |
nelmio/cors-bundle Version ^2.5 | — | — |
liip/monitor-bundle Version ^2.24 | — | — |
sentry/sentry-symfony Version ^5.3 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.