turahe/ledger
The repository includes tests, release notes, and automated checks, while its license and package structure are clear. Security policy is absent, and the workflow audit found all action references unpinned plus an archived action.
58%
Total Score
100
94
75
Health Score Breakdown
The package has 13 releases over about two years, but none in the last 12 months. That prolonged release gap is a meaningful maintenance concern despite the earlier regular cadence.
The repository has no security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though it is less serious than the maintenance slowdown.
Both workflows were analyzed, but all 9 action references are unpinned, one workflow grants top-level write access, and a high-confidence archived-action finding was reported. The cache-poisoning finding is low confidence and is only a hygiene concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Nur Wachid |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 turahe/core Version ^1.0 | — | — |
turahe/master-data Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.