simtel/rector-rules
The repository includes tests, a useful README, Composer tooling, and security scanning. GitHub Actions use unpinned dependencies, and no security policy is published.
62%
Total Score
50
100
94
75
Health Score Breakdown
The repository is owned by a user account rather than an organization, so the project appears to rely on individual backing; this matters alongside the thin release and commit history.
The package has only one release, published about 11 months ago, so there is little release history to demonstrate sustained maintenance.
There were no commits and no active maintainers in the past three months, which weakens confidence that maintenance is continuing.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear; this is a minor transparency gap.
Both workflows were analyzed successfully with no untrusted checkouts, script injection, or high-confidence audit findings. However, all 7 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 11 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.