sseidelmann/junit-converter
The codebase has tests, a useful README, release notes, and a small runtime dependency set. The workflow is auditable but uses three unpinned actions, and no security policy is published.
70%
Total Score
50
100
83
67
Health Score Breakdown
Only one account has registry publishing access. The repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
The package is about one year old with three releases and only one release in the last 12 months. This suggests a small or slowing maintenance effort, though the linked repository was pushed recently.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this lowers external validation modestly but does not establish abandonment by itself.
Composer is used as the build tool, but no security scanning tool was detected. This is a transparency and hygiene gap rather than evidence that the package is unsafe.
The repository has no security policy. For a command-line conversion library this is a modest disclosure and maintenance gap, not a severe dependency risk on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sebastianseidelmann |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/console Version * | — | — |
Weekly Downloads
Info
- Last Published
- 11 months ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.