websonette/latte-application
Clear documentation, repository tests, and a security policy improve transparency. The project is very new and all recent commits come from one contributor, while its workflow uses three unpinned actions and installs an unlocked package.
68%
Total Score
67
100
86
88
Health Score Breakdown
This is the first release, published 20 days ago, so there is not yet enough history to demonstrate sustained maintenance or release stability.
One contributor made 100% of the six recent commits. Organization backing provides some handoff capacity, but no second active contributor is shown.
Six commits in the last three months show recent work, but all activity comes from one active maintainer, limiting evidence of durable maintenance capacity.
Version v0.1.0 is not a stable major release, indicating an immature public API and a higher likelihood of breaking changes.
The only workflow is fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection findings. However, all three actions are unpinned and a high-confidence low-severity finding reports installing a package outside a lockfile.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nette/di Version ^3.2 | — | — |
latte/latte Version ^3.0 | — | — |
nette/bootstrap Version ^3.3 | — | — |
nette/application Version ^3.3 | — | — |
contributte/translation Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 23 days ago
- Created
- 23 days ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.