tourze/access-token-contracts
The package has a clear MIT license, tests, release notes, and no install-time scripts. Its two-release history, zero commits in the last three months, absent security policy, and unpinned workflow actions leave meaningful maintenance and build-integrity concerns.
58%
Total Score
83
100
83
75
Health Score Breakdown
Only two releases have been published, both within the first few weeks of the package's history, so long-term maintenance cadence is not yet demonstrated.
There were no commits and no active maintainers in the last three months, which is a meaningful sign of currently inactive maintenance despite the repository not being archived.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and automation gap.
The repository has no security policy, so users lack a documented route for reporting vulnerabilities; this is a transparency gap rather than evidence of unsafe code.
The assessed release is 1.0.0, but the reported latest version is v0.0.1, creating an unresolved version-history inconsistency that weakens confidence in release metadata.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/security-core Version ^7.3 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 10 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.