yarri/my-blowfish
The package is small and focused, with clear documentation, tests, and a permissive license. Its limited maintenance activity and unpinned workflow actions warrant extra care for long-lived production use.
68%
Total Score
50
92
75
Health Score Breakdown
There were no commits and no active maintainers in the last 3 months. The recent release partly offsets this, but the observed development activity is currently quiet.
The repository has only 1 star, 0 forks, and 1 watcher. Low adoption is supporting caution about external scrutiny, but it is not a health verdict by itself.
The repository has no security policy. For a password-hashing library, that reduces transparency around vulnerability reporting and response expectations.
The single workflow was fully analyzed with no high- or medium-confidence findings and no untrusted checkout or script-injection sinks. However, both action references are unpinned, leaving avoidable build reproducibility and action-substitution risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jaromir Tomek |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.