spiral/session
Repository tests and Psalm checks provide useful safeguards. Recent work comes from one contributor, and both workflow action references are unpinned.
82%
Total Score
83
100
100
67
Health Score Breakdown
All recent commits came from one contributor, creating maintenance concentration; organization backing partly offsets this because responsibility can be handed off.
The repository has no published security policy, leaving disclosure and security-maintenance procedures less transparent.
Both workflows were analyzed successfully with no dangerous triggers, injection findings, or audit findings. However, all 2 of 2 action references are unpinned, which is a supply-chain hygiene weakness.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-501569 spiral/session is vulnerable to Path Traversal in versions 2.6.0 - 3.13.0 and 3.14.0 - 3.17.0. | 2.6.0 - 3.13.03.14.0 - 3.17.0 | Critical |
Package versions
Maintainers
 Anton Titov (wolfy-j) |
| Pavel Butchnev (butschster) |
| Aleksei Gagarin (roxblnfk) |
| Maksim Smakouz (msmakouz) |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 spiral/core Version ^3.17.2 | — | — |
spiral/cache Version ^3.17.2 | — | — |
spiral/files Version ^3.17.2 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.