Package Health

shudd3r/toolshed

The repository has solid tests, a clear README, and 81 commits in three months. Its single-maintainer base and fully unpinned workflow references leave limited resilience and reproducibility.

Latest 0.1.0PackagistPackagist

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

75

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

50

Health Score Breakdown

Release historycaution

This is a young package, only 25 days old with one release, so its maintenance record and long-term stability are not yet established.

Repo bus factorcaution

All 81 recent commits came from one contributor, leaving maintenance highly dependent on a single person and creating a meaningful continuity risk.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.

Version stabilitycaution

Version 0.1.0 is not a stable major release, which signals an immature API and greater likelihood of breaking changes.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers or audit findings, but all 15 action references are unpinned, weakening build reproducibility and update control.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

shudd3r

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
28 days ago
Created
28 days ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform