The project has clear documentation, organizational backing, and a release note for this version. Maintenance has been quiet for three months and all workflow actions are unpinned, so pin this version if adopting.
68%
Total Score
50
92
83
The package has existed for about seven years and released once in the last 12 months, but its median release interval is about 423 days, indicating a slow cadence.
The repository recorded no commits and no active maintainers in the last three months, a meaningful sign of currently quiet maintenance despite the recent release and push.
The only workflow was fully analyzed with no audited findings or untrusted checkout sinks, but all three action references are unpinned, leaving avoidable supply-chain drift risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3|^2|^1 | — | — |
amphp/amp Version ^3 | — | — |
amphp/log Version ^2 | — | — |
amphp/sync Version ^2 | — | — |
amphp/socket Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.