toneflix-code/cuttly-php
Tests, a changelog, release notes, and a security policy make the project transparent. Maintenance has gone quiet since the initial releases, while workflow hygiene adds some avoidable risk.
60%
Total Score
75
94
75
Health Score Breakdown
The package has had three releases, all clustered around September 2024, with no releases in the last 12 months; the latest release is about two years old. This materially raises abandonment and freshness concerns.
There were no commits and no active maintainers in the last three months. This is the clearest maintenance concern, although the repository was recently pushed according to the archive-status signal.
All five workflows were analyzed, but all 11 action references are unpinned and a high-confidence bot-conditions finding affects the Dependabot auto-merge workflow. The pull-request-target trigger has no untrusted checkout or script-injection sink, limiting the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Legacy |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 vlucas/phpdotenv Version ^5.6 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
symfony/http-client Version ^6.4|^7.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.