yireo/magento2-linkpreload
Clear documentation, tests, release notes, and a security policy support ongoing maintenance. The single-contributor pattern and unpinned workflow images add avoidable dependency risk.
72%
Total Score
75
88
100
Health Score Breakdown
The package has existed since 2019 with 38 releases and a recent release, but only one release appeared in the last 12 months, indicating a slower release cadence.
All five commits in the last three months came from one contributor, leaving maintenance dependent on a single active developer despite organization backing.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest monitoring gap.
All five workflows were analyzed and the auditor found four high-confidence unpinned-image findings, including floating latest container tags. No untrusted checkout, script injection, or broad top-level write permission was detected, so this is a hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jisse Reitsma (Yireo) |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 magento/framework Version ^102.0|^103.0 | — | — |
symfony/dom-crawler Version ^2.7|^3.0|^4.0|^5.0|^6.0|^7.0 | — | — |
magento/module-store Version ^100.0|^101.0 | — | — |
magento/module-config Version ^100.0|^101.0 | — | — |
magento/module-backend Version ^101.0|^102.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 months ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.