silverstripe/config
The project has a long release record, organization backing, repository tests, and release notes for this version. A missing security policy and no commits in the last three months leave maintenance and transparency less reassuring.
65%
Total Score
75
100
94
67
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last three months. The contemporaneous release and push provide some compensation, but the short-term activity gap still weakens maintenance confidence.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.
No security policy is present in the repository, reducing transparency about vulnerability reporting and response expectations.
All six analyzed action references are unpinned, which weakens build reproducibility. However, the audit found no injection or untrusted-checkout sinks, and five workflows use read-only permissions, limiting the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version ^7.0 | — | — |
marcj/topsort Version ^2.0.0 | — | — |
symfony/finder Version ^7.0 | — | — |
psr/simple-cache Version ^3.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.