sdkfabric/starwars
The MIT license, readable documentation, and organization ownership provide a solid foundation. Workflow permissions and unpinned actions add avoidable maintenance risk, while recent repository activity is concentrated in one contributor.
68%
Total Score
100
100
83
67
Health Score Breakdown
The package has had no registry release in about 18 months and none in the last 12 months, which raises freshness and abandonment concerns despite nine releases overall.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented; this is a transparency gap but not evidence of unsafe code.
The release is not marked prerelease, but the package remains on an unstable 0.x major version, so compatibility expectations are limited.
Both workflows grant top-level write permissions and all three analyzed action references are unpinned. The audit found no untrusted checkout, injection, or high-confidence dangerous findings, so this is workflow hygiene risk rather than a severe defect.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 sdkgen/client Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.