tightenco/takeout
The release history is long and the project still published this version, with tests, release notes, and a security policy. Workflow references are entirely unpinned, and recent repository activity has stopped, so future maintenance deserves attention.
68%
Total Score
75
100
94
100
Health Score Breakdown
The repository recorded zero commits and zero active maintainers in the last 3 months, a concrete sign that maintenance has recently slowed despite the new release.
There were no new or closed issues in the last month, but one pull request was opened; this indicates limited recent collaboration rather than complete abandonment.
Composer and Box are used for builds, but no security scanning tools are reported. The missing scanning is a hygiene gap rather than evidence of unsafe code by itself.
All 13 analyzed action references are unpinned, and high-confidence template-injection findings appear in the Docker publishing workflow; archived actions also appear in test and lint workflows. No untrusted checkout or dangerous trigger was reported, so these are workflow hygiene concerns rather than standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Matt Stauffer |
| Jose Soto |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/semver Version ^3.4 | — | — |
guzzlehttp/psr7 Version ^2.6 | — | — |
laravel/prompts Version ^0.3.2 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.