setono/deployer-cron
The repository is clearly tied to the package and the release is MIT-licensed, with no install-time scripts. Pin the nine GitHub Actions references before relying on the build workflow.
61%
Total Score
75
83
75
Health Score Breakdown
The package has 13 releases since 2020, but none in the last 12 months and the latest registry release was nearly two years ago, which raises maintenance concerns.
The repository had no commits and no active maintainers in the last three months, reinforcing the concern raised by the lack of recent registry releases.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear.
The assessed release is v1.0.0-alpha, so its API and behavior may still change despite the package having reached a stable major version number.
The workflow audit completed cleanly with no dangerous triggers or audit findings, but all 9 action references are unpinned, leaving the build exposed to moving action versions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Joachim Løvgaard |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/finder Version ^5.4 || ^6.4 || ^7.0 | — | — |
webmozart/assert Version ^1.10 | — | — |
deployer/deployer Version ^7.4 | — | — |
setono/cron-builder Version ^1.0@alpha | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.