tipoff/fees
The repository has tests, a changelog, security policy, and static analysis, but development stopped about five years ago. Unpinned workflow actions add a smaller reproducibility concern; avoid relying on new fixes from this release.
42%
Total Score
50
83
100
Health Score Breakdown
The latest release was about five years ago, with no releases in the last 12 months. That strongly raises abandonment risk for a package used in an application.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and limited evidence of ongoing maintenance.
Three issues remain open, with no new or closed issues and no pull-request activity in the last month. This is additional evidence of inactivity, though it is less conclusive than the release and commit history.
All seven analyzed action references are unpinned, creating a reproducibility and dependency-change risk. The audit found no untrusted checkouts, script injection, or high-severity findings, which limits this to a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Tipoff |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tipoff/support Version ^2.1.6 | — | — |
tipoff/locations Version ^2.13 | — | — |
tipoff/authorization Version ^2.8.6 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.