transformstudios/review
The missing license and fully unpinned workflow actions reduce transparency and reproducibility. Organization backing, clear documentation, and regular registry releases provide meaningful reassurance.
62%
Total Score
63
100
88
50
Health Score Breakdown
No license declaration or license file was found, leaving the legal terms for using this package unclear.
Only one registry account can publish releases, which creates some publishing concentration, but the organization-backed project and recent release activity partly compensate.
There were no commits or active maintainers in the past 3 months, a meaningful maintenance warning despite the recent registry release history.
The repository has 1 open issue and 5 open pull requests, with one new pull request in the past month but no merged pull requests, suggesting some unresolved work.
Composer build tooling is present, but no security scanning tools were detected; this is a hygiene gap rather than evidence of abandonment.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Erin Dalzell |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 statamic/cms Version ^6.0 | — | — |
pixelfear/composer-dist-plugin Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.