srmklive/flysystem-dropbox-v2
The small dependency surface and stable release make integration straightforward. Limited security documentation and unpinned workflow actions add modest maintenance overhead.
57%
Total Score
50
90
50
Health Score Breakdown
The package has had no release in about five years, with zero releases in the last 12 months. Its earlier release cadence shows an established project, but the long pause raises abandonment risk.
The repository recorded no commits and no active maintainers in the last three months, while its last push was about five years ago. This is the strongest evidence that ongoing maintenance is limited.
The repository has no security policy, leaving users without a documented channel or process for reporting vulnerabilities. This is a transparency gap, though it is partly offset by the package's small scope.
The single workflow was fully analyzed with no dangerous findings, but all four action references are unpinned. The absence of a top-level permissions block is not concerning on its own; unpinned actions remain a modest reproducibility and supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Raza Mehdi |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/flysystem Version ~1.0 | — | — |
guzzlehttp/guzzle Version ^6.0|^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.