tbessenreither/multi-level-cache
The package includes tests, clear documentation, a matching MIT license, and release notes for this version. Recent repository activity has stopped, while the workflow uses an unpinned container image and the project has no security policy.
58%
Total Score
50
93
50
Health Score Breakdown
The repository recorded 0 commits and 0 active maintainers in the last 3 months. For a package that is still being released, this is a meaningful maintenance and abandonment concern.
The project uses Composer build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The repository has no security policy. That makes vulnerability reporting and response expectations less clear for a library intended for application use.
The single workflow was fully analyzed and has read-only permissions with no untrusted checkout or script-injection findings. However, both action references are unpinned and the audit found a high-confidence unpinned container image using the floating latest tag, weakening build reproducibility.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tobias Bessenreither |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/cache Version ^7.3 | — | — |
symfony/http-kernel Version ^7.3 | — | — |
symfony/dependency-injection Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.