worldia/instrumentation-bundle
The repository has three active contributors, a clear README, tests, and a matching source project. The workflow is fully audited but its nine action references are unpinned, and no security policy or scanning tool is present.
84%
Total Score
100
100
94
83
Health Score Breakdown
Composer build tooling is present, but no security scanning tool was detected. The missing scanner is a modest supply-chain hygiene gap rather than evidence of abandonment.
The repository has no security policy. This reduces vulnerability-reporting transparency, though active commits, tests, and organizational backing partly compensate.
The single workflow was completely analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all nine action references are unpinned, leaving a reproducibility and action-substitution hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Worldia developers |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 open-telemetry/sdk Version ^1.2 | — | — |
symfony/dependency-injection Version ^7.4 || ^8.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.