voku/agent-recall-compiler
Clear documentation, an MIT license, and a security policy support straightforward adoption. The single-contributor concentration and unpinned workflow actions warrant monitoring despite strong current activity.
82%
Total Score
75
100
94
88
Health Score Breakdown
The registry namespace and repository are owned by the same individual account. This confirms ownership alignment but provides no organizational handoff cushion.
Two contributors were active, but one authored about 96% of the last three months' commits, leaving substantial concentration risk. The second active contributor partly mitigates but does not remove it.
Version 0.23.0 is not a prerelease and recent releases are not prerelease versions, although the package remains below major version 1 and may still evolve.
Both workflows were analyzed successfully with no untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned and one workflow grants top-level write permissions, creating a moderate reproducibility and token-scope concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Lars Moelleken |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 voku/agent-map Version ^0.18.0 | — | — |
Weekly Downloads
Info
- Last Published
- 7 hours ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.