wyrihaximus/metrics-lazy-registry
The source repository includes tests, release notes, a clear MIT license, and a small dependency surface. Workflow permissions are broad and action references are unpinned, while no security policy is provided. Pin this version and inspect its install-time scripts before adoption.
58%
Total Score
75
100
88
50
Health Score Breakdown
The package runs post-install and post-update Composer scripts, adding install-time execution risk that deserves review even though no malicious finding is established here.
The package has only 3 releases since December 2020, with a median interval of about 681 days and no registry releases in the last 12 months, indicating a sparse release cadence.
There were 0 commits and 0 active maintainers in the last 3 months, which weakens evidence of ongoing development; recent repository activity partly offsets but does not remove this concern.
The repository uses Make and Composer build tooling, but no security scanning tools were detected, leaving a modest security-process gap.
No security policy was found in the repository, reducing transparency about vulnerability reporting and response.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Cees-Jan Kiewiet |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 wyrihaximus/metrics Version ^2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.