It has clear licensing, repository tests, security scanning, and organization backing. The release is mature, but recent maintenance is quiet and all four workflow actions are unpinned.
67%
Total Score
75
93
100
The package has 51 releases since June 2017, but its latest release was 18 months ago and there were no releases in the last 12 months. This indicates a meaningful maintenance slowdown despite its established history.
The repository recorded no commits and no active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the repository is not archived and has recent issue and pull-request activity.
The sole workflow was fully analyzed with no high-confidence audit findings, dangerous untrusted checkouts, or script injections. However, all four action uses are unpinned, leaving a supply-chain hygiene weakness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/amp Version ^3 | — | — |
amphp/sync Version ^2 | — | — |
amphp/parser Version ^1.1 | — | — |
amphp/pipeline Version ^1 | — | — |
revolt/event-loop Version ^1 || ^0.2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.