zero-to-prod/curl-helper-sdk
Repository tests, release notes, and Dependabot scanning provide useful support. The single maintainer and fully unpinned actions add adoption risk; the workflow audit also found a high-confidence template-injection issue.
58%
Total Score
50
88
75
Health Score Breakdown
Only one registry maintainer is listed. The repository is user-owned rather than organization-owned, so there is little visible publishing redundancy.
The package has only 3 releases and no releases in the last 12 months; its latest release was about 13 months ago, indicating slowed maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, a concrete sign that maintenance may have stalled.
All 7 analyzed action references are unpinned, and the audit found a high-confidence template-injection issue plus one script-injection finding. No untrusted checkout or dangerous trigger was reported, limiting the severity.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 David Smith |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zero-to-prod/data-model Version ^81.9 | — | — |
zero-to-prod/curl-helper Version ^1.0 | — | — |
zero-to-prod/transformable Version ^71.0 | — | — |
zero-to-prod/package-helper Version ^1.1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.