sindyko/aliaser
README, tests, changelog, and release notes make the package easy to evaluate. Its last release and repository activity are from December 2025, with no commits in three months; workflow actions are also unpinned and no security policy is provided.
66%
Total Score
50
80
50
Health Score Breakdown
Only three releases were published, all within about two days in December 2025, followed by roughly nine months without a newer release. That is a limited maintenance history for a young package.
The repository recorded zero commits and zero active maintainers in the past three months, reinforcing the concern that development may have stalled.
No repository security policy was found. This is a modest transparency and issue-handling gap, though it is not evidence that the package is unsafe.
Version v0.1.2 is not marked prerelease, but the package remains below 1.0, so its API may still change substantially.
The single workflow was fully analyzed with no dangerous findings, but all three action references are unpinned. The absence of a top-level permissions block is acceptable on its own and does not offset the pinning gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alexander Kovalchuk |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/console Version ^10.0|^11.0|^12.0 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
illuminate/database Version ^10.0|^11.0|^12.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.