stimata/portal-sdk
Tests, release notes, MIT licensing, and a working CI setup improve confidence. The all-unpinned workflow references and absent security policy leave meaningful hygiene gaps alongside the limited maintenance history.
62%
Total Score
75
92
75
Health Score Breakdown
The package is only 145 days old and has three releases, all clustered within minutes on the first release day, so its longer-term maintenance record is still unproven.
The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful maintenance concern for a package this young.
The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities.
The single workflow was fully analyzed with no trigger or sink findings, but all 8 action references are unpinned, leaving avoidable build-integrity risk; the missing top-level permissions block is acceptable on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 STIMATA Engineering Team |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
illuminate/contracts Version ^10.0|^11.0|^12.0|^13.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 4 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.