willdurand/jsonp-callback-validator
It has MIT licensing, tests, a README, and only one runtime dependency. The workflow audit found no dangerous patterns, but all three action references are unpinned and the repository has no security policy.
68%
Total Score
50
100
93
50
Health Score Breakdown
The package has only 3 releases since October 2013, with no releases in the last 12 months and a median interval of about 4 years. This indicates slow maintenance, though the release notes describe a deliberate stable-library update.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with a project whose latest release was in January 2022. This weakens evidence of ongoing maintenance.
The repository has no SECURITY.md or other declared security policy. That reduces transparency for reporting and handling vulnerabilities, although the package includes tests and a clear README.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 3 action references are unpinned, which is a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 William Durand |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.