tatter/assets
It includes tests, release notes, a clear license, and a security policy. The long pause in releases and commits, plus unpinned workflow actions, make future maintenance and build reproducibility less certain.
60%
Total Score
75
100
93
100
Health Score Breakdown
The package has 26 releases since March 2019, but none in the last 12 months and the latest registry release was in September 2023. This indicates a substantial maintenance pause, although the release history itself is established.
The repository recorded no commits and no active maintainers in the last 3 months. The repository was last pushed in January 2024, so this is a meaningful sign of slowed maintenance rather than confirmed abandonment.
All 23 analyzed workflow action references are unpinned, which weakens build reproducibility. However, all workflows were analyzed successfully, and the audit found no untrusted checkouts, script injection, or write-enabled top-level permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matthew Gatner |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.