webfactory/shortcode-bundle
Its documentation, tests, changelog, and MIT license make adoption straightforward. The organization-owned project is maintained and released regularly, but recent work is concentrated in one contributor and workflow actions are unpinned.
78%
Total Score
83
100
50
Health Score Breakdown
All 2 recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown, leaving a meaningful concentration risk.
The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
All 8 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain control. The audit found no dangerous triggers, untrusted checkouts, script injection, or high-severity findings, limiting the concern to workflow hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^2.0 || ^3.0 | — | — |
twig/twig Version ^2.0 || ^3.0 | — | — |
symfony/form Version ^6.4 || ^7.3 || ^8.0 | — | — |
symfony/config Version ^6.4 || ^7.3 || ^8.0 | — | — |
symfony/routing Version ^6.4 || ^7.3 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.