yireo/magento2-webp2-for-hyva
The linked project is organization-backed, recently updated, and has a security policy. Its single published release and concentrated contributions leave limited evidence of long-term resilience, while workflow images are unpinned.
62%
Total Score
83
93
100
Health Score Breakdown
This is the package's only release, published nearly three years ago, with no releases in the last 12 months. That limits evidence of sustained release maintenance.
All five recent commits came from one contributor, leaving a thin active contributor base and increasing continuity risk. Organization backing helps, but no second active contributor is shown.
All workflows were analyzed and no untrusted checkouts or script injection were found, but all six action references are unpinned and four high-confidence findings identify unpinned or floating container images.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 magento/framework Version ^101.0.1|^101.1|^102.0|^103.0 | — | — |
yireo/magento2-webp2 Version ~0.12 | — | — |
hyva-themes/magento2-graphql-view-model Version ^1.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.