PuMuKIT blackboard import API
62%
Total Score
caution
Usable with caveats: no commits in three months and an unpinned workflow image weaken maintenance confidence.
The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful sign of slowed maintenance despite the recent release history.
The repository name does not match the package name and its README does not mention the package, so the repository’s ownership of this package is not clearly established by the collected evidence.
The linked repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
The complete audit found one high-confidence, high-severity unpinned container image in the only workflow. There is no untrusted checkout or script injection, but the image is not fixed to a verifiable version.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
pumukit/pumukit Version ^5.0 | — | — |
firebase/php-jwt Version ^6.10 | — | — |
symfony/http-client Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.