vanderlee/expression
A single contributor handles all recent commits, and both workflow action references are unpinned. Regular releases, release notes, tests, readme coverage, read-only workflow permissions, and security scanning provide useful reassurance.
72%
Total Score
67
100
100
50
Health Score Breakdown
The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational handoff capacity.
One contributor made all 10 recent commits, leaving no demonstrated second maintainer to provide continuity if the primary maintainer becomes unavailable.
The repository has no security policy, which weakens the documented path for reporting and handling vulnerabilities in a parser that evaluates expressions.
The single workflow was fully analyzed, uses read-only permissions, and has no reported audit findings; however, both action references are unpinned, leaving dependency versions mutable.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.