Package Health

waffle-commons/data

Its documentation, tests, changelog, and release notes provide a strong basis for integration. The beta status and broadly unpinned workflow actions call for continued caution as the project matures.

Latest 0.1.0-beta6PackagistPackagist

78%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

94

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Health Score Breakdown

Version stabilitycaution

All recent releases are prereleases and version 0.1.0-beta6 is not a stable major release, so APIs and behavior may still change materially.

Workflow auditcaution

The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 31 action references are unpinned. The repeated cache-poisoning findings have low confidence, so they are hygiene concerns rather than severe evidence.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leslie Petrimaux

Direct Dependencies

DependencyLast ReleaseScore
psr/http-client
Version ^1.0
psr/http-factory
Version ^1.0
psr/http-message
Version ^1.1 || ^2.0
psr/http-server-handler
Version ^1.0
waffle-commons/contracts
Version self.version

Weekly Downloads

Info

Last Published
12 days ago
Created
3 months ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform