winter/storm
Winter CMS Storm Library
78%
Total Score
100
94
75
Health Score Breakdown
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and security-hygiene gap.
The audit analyzed all four workflows and found a high-confidence template-injection issue in code-quality.yaml; all eight action references are also unpinned. No untrusted checkout, dangerous trigger, or top-level write permission was observed, so this is a caution rather than a standalone severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alexey Bobkov |
| Samuel Georges |
| Luke Towers |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 twig/twig Version ^3.14 | — | — |
league/csv Version ~9.1 | — | — |
symfony/yaml Version ^6.0 | — | — |
doctrine/dbal Version ^2.6 | — | — |
nesbot/carbon Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 10 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.