waffle-commons/contracts
The package has a small but active contributor base and strong documentation and testing. Its prerelease status and unpinned workflow actions are worth monitoring.
82%
Total Score
100
100
94
100
Health Score Breakdown
This is a beta prerelease and all recent releases are prereleases, so API stability is less certain even though release activity is regular.
The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 28 action references are unpinned. The reported cache-poisoning findings have low confidence and therefore remain a hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leslie Petrimaux |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3.0 | — | — |
psr/cache Version ^3.0 | — | — |
psr/container Version ^2.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.