tresbientech/drupack
The repository has tests, active build and security tooling, and organizational backing. Workflow references are all unpinned, while the missing security policy and limited release history reduce confidence in long-term dependability.
67%
Total Score
83
86
50
Health Score Breakdown
This package is brand new, with 2 releases in the last 12 months and releases arriving within hours, so there is little evidence of sustained maintenance or release discipline yet.
One contributor made all 335 commits in the last 3 months, leaving no demonstrated handoff capacity if that maintainer becomes unavailable. Organizational ownership partly offsets this risk but does not remove it.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for users of this executable package.
Version 0.5.2 is not a stable major release, which indicates an evolving API and raises adoption risk for consumers seeking long-term compatibility.
All 46 analyzed action references are unpinned, which weakens build reproducibility. The reported unpinned-image and cache-poisoning findings are low-confidence hygiene warnings; workflows were fully analyzed and have no untrusted checkout or script-injection findings.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 composer/semver Version ^3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 hours ago
- Created
- 3 hours ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.