tomasvotruba/type-coverage
The package includes tests, a substantial README, and a clear MIT license. Maintenance is concentrated in one contributor, and all 11 workflow actions are unpinned, so keep an eye on continuity and build reproducibility.
82%
Total Score
75
100
94
83
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the single-contributor activity in the repository represents a genuine bus-factor concern rather than normal organizational delegation.
All 15 recent commits came from one contributor, giving the project a concentrated maintenance base and some continuity risk because the owner is an individual.
Composer is used as the build tool, but no security-scanning tools were detected; this is a modest transparency and defense-in-depth gap.
The repository has no security policy. This is a minor transparency gap for a maintained developer tool, not evidence that the release is unsafe.
All four workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings, and no top-level write permissions. However, all 11 action references are unpinned, leaving build inputs less reproducible.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 phpstan/phpstan Version ^2.2 | — | — |
webmozart/assert Version ^1.11 || ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 25 days ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.