salamek/zasilkovna
The stable major version is clearly licensed, documented, and linked to the matching source repository. Recent maintenance is quiet, and the workflow uses two unpinned actions without a security policy, so pin this version and monitor for updates.
61%
Total Score
75
100
88
75
Health Score Breakdown
The package has 20 releases since 2017, but none in the last 12 months and its latest registry release was over a year ago, indicating slowing maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of limited current maintenance capacity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so there is no documented channel or process for handling vulnerabilities.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, both referenced actions are unpinned, which leaves the build exposed to moving action versions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Adam Schubert |
| Jan Barášek |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tecnickcom/tcpdf Version ^6.3 | — | — |
spatie/array-to-xml Version ^3.4 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.