site5/phantoman
It is clearly licensed and the repository matches the package, but its workflow uses 3 unpinned actions and has no security policy. The long pause leaves little evidence of active maintenance.
43%
Total Score
0
86
50
Health Score Breakdown
The latest release was in October 2017, with no releases in the last 12 months. This long release gap is strong evidence of abandonment risk for a dependency.
The repository recorded no commits and no active maintainers in the last 3 months. Combined with the stale release history, this indicates little current maintenance capacity.
The linked repository has no security policy. This weakens vulnerability-reporting transparency, although it does not by itself show that the package is unsafe.
The single workflow was fully analyzed without dangerous triggers or audit findings, but all 3 referenced actions are unpinned. This is a supply-chain hygiene gap, though not severe on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Grant Lucas |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 codeception/codeception Version ^2.2.7 | — | — |
Weekly Downloads
Info
- Last Published
- 8 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.