silpo-tech/odm-bundle
Its MIT licensing, tests, and clear README support straightforward adoption. All 10 workflow actions are unpinned, and only two releases over about 11 months provide limited evidence of sustained maintenance.
68%
Total Score
100
88
75
Health Score Breakdown
Only two releases are recorded, with the latest published about 11 months ago. That limited cadence provides weak evidence of ongoing maintenance, though it does not by itself establish abandonment.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.
The repository has no security policy, which makes vulnerability reporting and maintenance expectations less transparent.
The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings, and it scopes permissions at job level. However, all 10 action references are unpinned, leaving avoidable build-reproducibility and update risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ramsey/uuid Version ^4.2 | — | — |
symfony/config Version ^7.0 | — | — |
symfony/validator Version ^7.0 | — | — |
symfony/http-kernel Version ^7.0 | — | — |
doctrine/mongodb-odm Version ^2.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.