yard/webmanifest
Six releases arrived on the same day, while the repository shows no active contributors in the last three months. Tests, release notes, licensing, dependency tooling, and organizational backing provide useful counterweight.
62%
Total Score
75
100
94
75
Health Score Breakdown
The package has six releases over 289 days, but all six were published on the same day, showing a concentrated initial release burst rather than an established cadence.
No commits and no active maintainers were recorded during the last three months, which is a meaningful maintenance concern despite the repository not being archived.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
All eight analyzed workflow references are unpinned, and every workflow inherits secrets; one workflow also grants top-level write access. No untrusted checkout or script-injection path was found, so this is a hygiene concern rather than a severe dependency risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 webmozart/assert Version ^1.11 | — | — |
intervention/image Version ^3.9 | — | — |
spatie/laravel-data Version ^4.11 | — | — |
spatie/laravel-package-tools Version ^1.16 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.