The package has clear documentation, broad tests, a recent compatibility release, and active organizational ownership. Maintenance is concentrated in one recent contributor, and all five workflow actions are unpinned, so ongoing review remains important.
82%
Total Score
83
100
100
88
All three recent commits came from one contributor, giving the project a concentrated short-term bus factor. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.
The single workflow was fully analyzed, uses read-only permissions, and has no untrusted checkouts, injection sinks, or audit findings. However, all five referenced actions are unpinned, leaving dependency versions exposed to upstream changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.