tinymeng/whoops
Documentation and licensing are in place, with a focused dependency set. The release line has been inactive since August 2020, and all five workflow actions are unpinned, increasing maintenance and build-integrity concerns.
58%
Total Score
50
100
88
100
Health Score Breakdown
The repository is owned by an individual account rather than an organization, so the small apparent maintainer base is not offset by visible organizational backing.
The latest release was published in August 2020, with no releases in the last 12 months; this is a substantial sign of possible abandonment despite the package having 56 releases overall.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long gap in registry releases and raising maintenance concern.
Composer build tooling is present, but no security-scanning tool was detected; this is a modest transparency and maintenance gap.
The workflow audit found no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all five action references are unpinned, so workflow dependencies can change unexpectedly.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Filipe Dobreira |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^1.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 13 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.