soyhuce/array-factory
The package is documented, tested in its repository, licensed, and backed by security tooling. Recent maintenance is thin, and the automation uses unpinned actions and has workflow-condition issues that merit care.
67%
Total Score
75
100
94
100
Health Score Breakdown
The package is mature at about four years old with 15 releases, but only one release appeared in the last 12 months, indicating a relatively quiet recent cadence.
The repository recorded zero commits and zero active maintainers over the last three months, a concrete sign of slowed maintenance and increased abandonment risk.
There are no open issues and four open pull requests, but no pull requests were merged in the last month, so current issue-resolution activity is limited.
All six workflows were analyzed with no failed files, and there are no untrusted checkouts or script-injection findings. However, all 14 action references are unpinned, with high-confidence findings for spoofable bot conditions and an unpinned container image; these are workflow hygiene and supply-chain weaknesses, though no untrusted sink was detected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Bastien Philippe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/database Version ^11.0|^12.0 | — | — |
illuminate/pipeline Version ^11.0|^12.0 | — | — |
illuminate/collections Version ^11.0|^12.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.