woohoolabs/yin-middleware
Unpinned workflow actions and no security policy add avoidable maintenance risk. The repository has tests, release notes, a clear README, and an active organization owner, but this version is dated.
58%
Total Score
75
88
75
Health Score Breakdown
The package has 22 releases over about 11 years, but none in the last 12 months and the latest registry release was in June 2020, indicating substantial staleness.
There were no commits and no active maintainers in the latest three months, which is a meaningful sign of currently slow maintenance even though the repository is not archived.
The repository uses Make and Composer build tooling, but no security scanning tools were detected; this is a modest transparency and maintenance gap.
No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Máté Kocsis |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/container Version ^1.0.0 | — | — |
woohoolabs/yin Version ^4.0.0 | — | — |
psr/http-server-middleware Version ^1.0.0 | — | — |
psr/http-message-implementation Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.