yahoo/purecss
Clear licensing, documentation, tests, and release notes support adoption. The repository has no security policy, and its workflows use five unpinned actions and install packages outside lockfiles.
68%
Total Score
83
89
67
Health Score Breakdown
The package has 14 releases since June 2017, but none in the last 12 months and its latest registry release was in October 2022, indicating a long release gap.
No commits or active maintainers were recorded in the last three months, which weakens evidence of current maintenance despite recent merged pull-request activity elsewhere in the repository signals.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Both analyzed workflows have five unpinned action references and high-confidence low-severity adhoc-package findings because they install packages outside lockfiles. There are no untrusted checkouts, script injections, or broad top-level write permissions.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 ericf |
| tilomitra |
| msweeney |
| jamesalley |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.