xoops/rector-xoops
Clear documentation, release notes, licensing, and organization backing make the project transparent. Unpinned workflow actions and broad permissions add avoidable maintenance hygiene risk.
64%
Total Score
75
100
89
100
Health Score Breakdown
This package is only 104 days old and has one release, so its maintenance record is still unproven rather than established.
No commits and no active maintainers were recorded in the last three months. For a new alpha package, that leaves maintenance continuity unproven despite the recent repository push timestamp.
The assessed version is a prerelease and all recent releases are prereleases, which signals an immature API and greater change risk.
Both workflows were analyzed successfully with no reported audit findings or untrusted trigger sinks. However, all four action references are unpinned and one workflow grants top-level write permissions, creating a modest reproducibility and least-privilege concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 rector/rector Version ^2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 3 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.