webdevcave/yadic
The package is small but clearly packaged, tested, licensed, and backed by an organization. Its workflow uses unpinned actions, and no repository security policy or scanning is present.
58%
Total Score
75
88
100
Health Score Breakdown
The package has had no release in about two years and only three releases overall, which materially raises abandonment risk despite its short early release intervals.
There were no commits and no active maintainers in the last three months, consistent with roughly two years without a release and a meaningful maintenance concern.
Composer build tooling is present, but no security scanning tooling is configured, leaving a modest transparency and maintenance gap.
The workflow was fully analyzed, uses read-only permissions, and has no high-confidence findings, but all three action references are unpinned, weakening build reproducibility and supply-chain control.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Carlos A. B. Carucce |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^2.0 | — | — |
psr/simple-cache Version ^3.0 | — | — |
webdevcave/simple-cache Version ^1.0 | — | — |
webdevcave/directory-crawler Version ^1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 2 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.