scherhak/uplinkr
Documentation, tests, and release notes make integration clearer. The repository has had no commits or active maintainers in about six months, while all three workflow actions are unpinned and the audit found a low-confidence cache concern.
65%
Total Score
67
100
89
88
Health Score Breakdown
The package and repository are owned by the same individual account, so ownership is consistent, but there is no organization backing shown to offset the single-person maintenance base.
There were no commits and no active maintainers in the last three months, despite the recent release history; this is evidence that maintenance has gone quiet and raises abandonment risk.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest repository hygiene gap.
Version v0.3.0 is not a stable major release, so compatibility may still change before 1.0 even though it is not marked as a prerelease.
The sole workflow was fully analyzed with no untrusted checkout or script-injection findings, but all three action references are unpinned. The low-confidence cache-poisoning finding is a hygiene concern rather than a severe standalone risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sascha Scherhak |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/console Version ^11.0|^12.0 | — | — |
illuminate/support Version ^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 7 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.