stancl/virtualcolumn
The repository remains unarchived and includes tests, while this version has release notes and a clear license. Its small dependency footprint keeps integration straightforward, but maintenance evidence is not fully current.
68%
Total Score
50
100
92
50
Health Score Breakdown
The package has had no registry release for about 19 months, and its nine releases are spread over a median interval of about six months. This indicates slow maintenance, though not abandonment by itself.
The repository recorded no commits and no active maintainers in the last three months. That is a meaningful maintenance warning, despite the repository having been pushed more recently overall.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not evidence of a security incident.
All four analyzed action references are unpinned, weakening build reproducibility and exposing CI to moving dependencies. No untrusted checkout, script injection, dangerous trigger, or high-severity audit finding was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Samuel Štancl |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version >=10.0 | — | — |
illuminate/database Version >=10.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.