unleash/openfeature-provider
It has tests, a clear README, a license, and two active contributors. Pin this version while the project establishes a longer release history and improves workflow hygiene.
70%
Total Score
100
86
67
Health Score Breakdown
The package is 54 days old with only one release, so its maintenance pattern and long-term stability are not yet established.
No repository security policy was found, leaving vulnerability-reporting expectations and response procedures unclear.
v0.1.0 is an initial non-stable-major release, which signals a higher likelihood of breaking changes as the provider matures.
Both workflows were analyzed with no audit findings or untrusted-code sinks, but all six referenced actions are unpinned and one workflow grants top-level write permissions, creating moderate supply-chain hygiene concerns.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Unleash |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nyholm/psr7 Version ^1.8 | — | — |
symfony/cache Version ^7.0 | — | — |
unleash/client Version ^2.10.1 | — | — |
open-feature/sdk Version ^2.2 | — | — |
symfony/http-client Version ^7.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 1 month ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.