setono/composite-compiler-pass
The MIT license and release notes make the upgrade easy to evaluate. CI is complete but all 18 action references are unpinned, and the repository has no security policy.
82%
Total Score
100
100
88
75
Health Score Breakdown
The package has four releases since April 2023 and one release in the last 12 months, with a median interval of about 385 days. The latest release is recent, so this indicates slow rather than absent maintenance.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest verification gap.
The repository has no security policy, so vulnerability reporting and response expectations are not documented.
The sole workflow was fully analyzed with no dangerous triggers, sinks, or audit findings. However, all 18 action references are unpinned, weakening build reproducibility and trust in CI dependencies.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joachim Løvgaard |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/dependency-injection Version ^6.4 || ^7.4 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.