It has an MIT license, repository tests, a README, and only two runtime requirements. The single-maintainer project has modest activity and lacks a security policy, so pin this version and monitor updates.
74%
Total Score
50
100
88
75
The package has existed for over six years with eight releases, but only one release in the last 12 months. The latest release is recent, so this suggests modest rather than absent maintenance.
There were no commits and no active maintainers during the last three months. The recent release and push partly offset this, but the current development activity remains thin.
The repository uses Composer and Make for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap.
The repository has no security policy. For a reusable library, that leaves vulnerability-reporting expectations unclear.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all six action references are unpinned, leaving build inputs less reproducible and harder to control.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.