setono/coolrunner-bundle
Repository tests, Psalm scanning, an MIT license, and a GitHub release provide a solid baseline. The workflow leaves all 15 actions unpinned, while maintenance has stopped for over two years; pin this version only with a plan to replace or verify it.
59%
Total Score
75
90
50
Health Score Breakdown
The package has only two releases, with the latest on March 6, 2024 and none in the last 12 months. This is a meaningful maintenance concern for a library, though it is not deprecated.
The repository had zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating current maintenance capacity is weak.
No security policy was found in the repository. This weakens vulnerability-reporting transparency, although the repository does use Psalm security scanning.
The workflow was fully analyzed with no injection or high-severity findings, but all 15 action references are unpinned. That leaves the build exposed to changing action contents and is a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joachim Løvgaard |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/cache Version ^1.0 || ^2.0 || ^3.0 | — | — |
cuyz/valinor Version ^1.0 | — | — |
symfony/cache Version ^5.4 || ^6.4 | — | — |
symfony/config Version ^5.4 || ^6.4 | — | — |
symfony/http-client Version ^5.4 || ^6.4 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.