web3p/rlp
Unpinned workflow actions and the lack of a security policy reduce transparency. Tests, a changelog, release notes, licensing, and organization backing provide strong maintenance context despite no recorded commits in three months.
76%
Total Score
88
100
94
75
Health Score Breakdown
No commits or active maintainers were recorded in the last three months. The fresh release and eight merged pull requests in the last month partly compensate, but the direct commit signal still indicates a maintenance gap.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.
The repository has no published security policy, which weakens vulnerability-reporting transparency for a package handling encoding and decoding.
The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all four action references are unpinned. The absence of a top-level permissions block is acceptable on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 sc0Vu |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 days ago
- Created
- 8 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.