uppes/coroutine
The source includes tests, release notes, and a matching repository, while its workflows use unpinned actions and contain high-confidence condition errors. Prefer the listed replacement, symplely/coroutine, for new projects.
20%
Total Score
50
100
71
75
Health Score Breakdown
Packagist marks the entire package as abandoned and names symplely/coroutine as its replacement. Package-wide abandonment is a severe dependency risk despite the available source repository.
The package has had no releases in the last 12 months, and its latest release was in March 2021, over five years ago. This strongly indicates that the published dependency is no longer maintained.
The repository recorded zero commits and zero active maintainers in the last three months. Combined with the stale registry release history, this supports a substantial abandonment concern.
The repository has no security policy. This is a transparency and vulnerability-reporting gap, although it is secondary to the package's abandonment status.
All 16 analyzed action references are unpinned, and the audit found six high-confidence unsound-condition findings across the three workflows. These are workflow hygiene weaknesses, but no untrusted checkout or script-injection sink was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lawrence Stubbs |
| Nikita Popov |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symplely/spawn Version ^1.1.8 | — | — |
Weekly Downloads
Info
- Last Published
- 5 years ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.