worksome/foggy
It has a clear README, repository tests, release notes for this version, and organization backing. MIT licensing, a non-archived repository, and no install-time scripts are reassuring.
58%
Total Score
83
100
75
Health Score Breakdown
The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance concern despite the recent package release.
The repository has no security policy, leaving vulnerability-reporting expectations less transparent; this is a minor documentation gap rather than evidence of abandonment.
The audit found a high-confidence bot-conditions issue in the Dependabot auto-merge workflow, and all 8 analyzed action references are unpinned; the pull_request_target workflow has top-level write permissions but no untrusted checkout or script injection was found.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Oliver Nybroe |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 doctrine/dbal Version ^3.9 | — | — |
fakerphp/faker Version ^1.24 | — | — |
symfony/console Version ^7.0|^8.0 | — | — |
symfony/var-dumper Version ^7.0|^8.0 | — | — |
thecodingmachine/safe Version ^3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.