umpirsky/list-generator
The package has tests, a clear MIT license, and static analysis in its build. Its workflows use unpinned container images, and no security policy is published.
53%
Total Score
50
93
50
Health Score Breakdown
The latest release was nearly five years ago, with no releases in the last 12 months. This substantially raises abandonment risk despite a previously regular release interval.
There were no commits and no active maintainers in the last three months, consistent with the long release gap and indicating weak current maintenance.
The repository has no published security policy, leaving disclosure and response expectations unclear. This is a transparency gap, though it is less serious than the inactivity evidence.
All five workflows use unpinned references, and the audit found a high-confidence unpinned container image. There are no untrusted checkouts or script-injection findings, limiting the risk to workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Saša Stamenković |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/yaml Version >=3.0 | — | — |
doctrine/dbal Version >=2.5 | — | — |
symfony/finder Version >=3.0 | — | — |
symfony/console Version >=3.0 | — | — |
laminas/laminas-db Version >= 2.6 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.