shlinkio/website
The source project is active and the release is stable, licensed, and free of install-time scripts. Registry publishing stopped in August 2019, maintenance is concentrated in one contributor, and the workflow audit found a floating container image plus inherited secrets.
62%
Total Score
83
88
67
Health Score Breakdown
The package has 33 releases, but its latest registry release was in August 2019 and there were no releases in the last 12 months, leaving this published dependency substantially stale.
All 11 recent commits came from one contributor, leaving maintenance dependent on a single active person; organization backing provides some handoff capacity but does not remove the concentration risk.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities in a package that is still actively maintained.
All five workflows were analyzed with no untrusted checkouts or script injection, but a high-confidence floating container image and medium-confidence inherited secrets were found; all six action references are unpinned.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alejandro Celaya Alastrué |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/cache Version ^1.8 | — | — |
roave/security-advisories Version dev-master | — | — |
zendframework/zend-config Version ^3.1 | — | — |
zendframework/zend-stdlib Version ^3.0 | — | — |
zendframework/zend-diactoros Version ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.