yiistack/collision
Clear documentation, repository tests, release notes, security scanning, and a security policy reduce adoption risk. The small project has limited popularity, and its workflow actions are all unpinned, weakening maintenance and build reproducibility.
58%
Total Score
50
88
100
Health Score Breakdown
The package has had only two releases, with the latest in April 2022 and none in the last 12 months; this is a substantial maintenance concern for a dependency assessed in 2026.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with a project that may no longer be actively maintained.
Two stars, no forks, and one watcher indicate a very small user and contributor footprint, which provides little external maintenance capacity, though popularity alone is not decisive.
All 9 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkout, script injection, high-severity finding, or excessive top-level token permissions, so this remains a hygiene concern rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yiisoft/di Version ^1.0 | — | — |
nunomaduro/collision Version ^5.1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.