sven/env-providers
It has a clear license, useful README, release notes, tests, and a matching source repository. Maintenance has gone quiet despite the repository remaining available, and its workflow dependencies are all unpinned.
67%
Total Score
50
100
94
88
Health Score Breakdown
The package and repository are owned by the same individual account rather than an organization, so the project has a limited visible backing structure.
The package has existed since 2016 with 17 releases, but its latest registry release was nearly two years ago and it had no releases in the last 12 months, indicating slowed maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, which is meaningful evidence of currently quiet development despite a recent push timestamp.
The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, injection findings, or write-wide permissions. However, all three action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Sven Luijten |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 illuminate/support Version ^10.0|^11.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.