timostamm/pathinfo
It has a small dependency surface and clear MIT licensing. CI and tests are present, though all three action references are unpinned and no security policy is published.
80%
Total Score
50
100
94
75
Health Score Breakdown
No commits or active maintainers were recorded in the last 3 months, which is a maintenance concern, although the release history shows 3 releases in the last 12 months and partially offsets it.
The repository uses Composer build tooling, but no security scanning tool was detected; this is a modest transparency and maintenance gap.
No repository security policy was found, leaving vulnerability-reporting guidance unspecified.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which is a supply-chain hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 months ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.