zenstruck/callback
MIT licensing, repository tests, release notes, and a security policy provide useful transparency. The registry has had no release for about four years, while all five workflow actions are unpinned; the repository is not archived and was pushed recently.
63%
Total Score
75
100
93
100
Health Score Breakdown
The latest release was published in August 2022, with no releases in the following roughly four years. This is meaningful abandonment risk, although the linked repository has been pushed recently.
There were no commits or active maintainers in the last three months. The recent repository push is reassuring but does not demonstrate sustained development activity.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all five action references are unpinned, leaving a supply-chain hygiene gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Kevin Bond |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 symfony/polyfill-php80 Version ^1.14 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.