Docker files for running a basic Craft application.
10%
Total Score
critical
Packagist marks the package abandoned, and its repository is archived with no recent commits or releases.
The package is explicitly marked abandoned on Packagist, with ddev listed as the replacement; this is a severe adoption risk for a dependency.
There have been no releases in the last 12 months, despite 122 releases overall; the roughly 17-month gap supports the abandonment concern.
The repository recorded 0 commits and 0 active maintainers during the last 3 months, providing no evidence of ongoing maintenance.
The linked repository is archived, and its last push was about 17 months ago, indicating the project is no longer actively maintained.
All 8 analyzed action references are unpinned and 2 workflows grant top-level write permissions, creating hygiene and reproducibility concerns; however, no untrusted checkout, script injection, or audit findings were detected.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.