verbb/feed-me
Import content from XML, RSS, CSV or JSON feeds into entries, categories, Craft Commerce products, and more.
78%
Total Score
healthy
Healthy release with active organization-backed maintenance; all eight workflow actions are unpinned and issue resolution is lagging.
Health Score Breakdown
Four issues were opened and no issues were closed in the last month, while 137 remain open. This suggests slower issue resolution and modestly lowers confidence in maintenance responsiveness.
Composer build tooling is present, but no security-scanning tool was detected. The repository's security policy and other evidence partly compensate, so this is a minor hygiene concern rather than a severe risk.
All three workflows were analyzed successfully with no reported audit findings, no untrusted checkouts, and no script-injection paths. However, all eight action references are unpinned, leaving avoidable build-integrity risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pixel & Tonic |
| Verbb |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 league/csv Version ^9.0 | — | — |
craftcms/cms Version ^5.10.9 | — | — |
nesbot/carbon Version ^2.10|^3.0.0 | — | — |
seld/jsonlint Version ^1.7 | — | — |
cakephp/utility Version ^5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 29 days ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.