twinh/github-actions-test
Tests, changelog, and release notes improve transparency, while the package has no license and no recent registry releases. The repository remains active in principle, but its workflows contain high-confidence artifact-credential exposure and mostly unpinned actions.
48%
Total Score
50
100
81
83
Health Score Breakdown
No license declaration or license file was found in the package or repository, leaving the legal terms for reuse unclear.
The package has one registry maintainer. Because the repository is owned by the same individual rather than an organization, this represents a thin publishing base and limited continuity.
The registry namespace and repository owner match, but the owner is an individual rather than an organization, so there is no demonstrated organizational backing to compensate for the thin maintainer base.
The latest registry release was about 2 years and 5 months ago, with no releases in the last 12 months. The 96-release history shows prior activity but does not offset the current release gap.
The repository recorded no commits and no active maintainers in the last 3 months, weakening the evidence of ongoing maintenance despite a more recent push timestamp.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 twinh |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 wei/wei Version ^0.10.0 | — | — |
github-test/app5 Version ^1.0.6 | — | — |
composer/installers Version ^2.1 | — | — |
mnsami/composer-custom-directory-installer Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.