yireo/magento2-html-hints
The repository has clear documentation, a license, a security policy, and recent commit activity. Maintenance depends on one active contributor, while workflow images use floating or unpinned tags; pinning those would reduce release-build uncertainty.
62%
Total Score
83
100
88
83
Health Score Breakdown
Only one release has been published, with no newer release over roughly nine months, so release maturity and ongoing registry maintenance remain limited.
All five recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown, leaving a meaningful continuity risk.
Composer build tooling is present, but no security-scanning tool was detected; the repository's separate security policy partly improves transparency without replacing automated scanning.
All five workflows were analyzed successfully and have no untrusted checkouts or script-injection findings, but four high-confidence findings identify floating or unpinned container images and all six action references are unpinned. This is a workflow hygiene and reproducibility concern, not evidence that the package itself is unsafe.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 magento/framework Version ^101.0 | ^102.0 | ^103.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 9 months ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.