Sculptor Devops Installer
58%
Total Score
50
94
67
The repository recorded zero commits and zero active maintainers in the last three months. Alongside the last push in March 2023, this strongly suggests that ongoing maintenance has stopped.
The package has 63 releases since May 2020, but none in the last 12 months and its latest release was in August 2022. This long release gap is a meaningful maintenance concern despite the earlier release history.
There are five open issues and six open pull requests, but no issues or pull requests were created, closed, or merged in the last month. Unresolved work combined with no recent handling supports a maintenance concern.
No repository security policy was found. This is a transparency gap, particularly for an installer that performs system setup, although it is not by itself evidence that the package is unsafe.
The single workflow has no top-level token permissions declaration. There are no observed top-level write permissions, but the omission leaves workflow access less explicit than recommended.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.0 | — | — |
illuminate/log Version ^8.0 | — | — |
illuminate/database Version ^8.40 | — | — |
nunomaduro/termwind Version ^1.14 | — | — |
laminas/laminas-text Version ^2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.