ux2dev/microinvest
The README, tests, MIT license, and matching repository provide a solid starting point. Its two releases arrived within one day, and all four workflow actions are unpinned; no security policy is present. Pin this exact version and expect API changes.
67%
Total Score
100
86
75
Health Score Breakdown
The package is only 58 days old with two releases, both occurring on the same day, so there is little evidence of an established release cadence.
The linked repository has no published security policy, leaving vulnerability-reporting and response expectations undocumented.
The assessed version is v0.9.1alpha and is not a stable major release, indicating that consumers should expect possible API or behavior changes.
The single workflow was fully analyzed with no high-confidence audit findings or untrusted checkouts, but all four action references are unpinned. The missing top-level permissions block is acceptable on its own, while unpinned actions remain a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 2 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.