snicco/signed-url
The small runtime dependency set and repository tests reduce adoption friction, while the organization-backed project is clearly identifiable. Missing security tooling and an unpinned workflow action leave maintenance and build-integrity gaps.
58%
Total Score
50
100
81
50
Health Score Breakdown
The package has 33 releases since April 2022, but there have been no releases in the last 12 months and the latest release was about two years ago. This is a meaningful maintenance concern despite the earlier release cadence.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. This raises abandonment and responsiveness concerns.
Composer is used for the build, but no security-scanning tools are present. The missing automated security checks modestly lowers confidence in ongoing maintenance quality.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities. This is a hygiene gap rather than evidence that the package is unsafe.
The assessed release is v2.0.0-beta.9, and 45% of recent releases are prereleases. Depending on a beta increases compatibility risk for consumers.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Calvin Alkan |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 webmozart/assert Version ^1.10 | — | — |
snicco/testable-clock Version ^2.0 | — | — |
paragonie/constant_time_encoding Version ^2.4 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.