waffle-commons/pipeline
The workflow uses 31 unpinned actions and has low-confidence cache warnings, leaving release automation hygiene to improve. Organization backing, recent contributions, and security tooling provide useful continuity.
78%
Total Score
100
94
100
Health Score Breakdown
This release is a prerelease and all recent releases are prereleases, so the API may still change. The active release cadence partly offsets the maturity concern.
All 31 analyzed action references are unpinned, and the audit reports repeated low-confidence cache-poisoning patterns. No untrusted checkout, script injection, dangerous trigger, or top-level write permission was found, so this is a hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Leslie Petrimaux |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/http-server-handler Version ^1.0 | — | — |
waffle-commons/contracts Version self.version | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 8 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.