tallieutallieu/dry-dbi
The package includes tests, release notes, and security scanning, with recent work from two contributors. Its proprietary license and unpinned workflow actions are notable adoption caveats.
78%
Total Score
100
100
88
83
Health Score Breakdown
The manifest declares a proprietary license, with no license file found. This creates a meaningful legal barrier for open-source dependency use.
The repository has no security policy, which weakens vulnerability-reporting transparency, although its security scanning tools provide some compensation.
Both workflows scope permissions at job level and have no high- or medium-confidence audit findings, but all 14 analyzed action references are unpinned, leaving avoidable update and tampering risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tallieutallieu/oak Version ^3.0.8 || ^4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 hours ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.