The repository includes a full test suite, release notes, and a security policy. MIT licensing, organization backing, and a matching source repository provide useful transparency for consumers.
67%
Total Score
88
100
89
83
The package has 51 releases since July 2021, but none in the last 12 months; this indicates a meaningful maintenance slowdown despite its established history.
The repository recorded zero commits and zero active maintainers during the last three months, which weakens the evidence of ongoing development despite its recent push timestamp.
Composer build tooling is present, but no repository security-scanning tool was detected; this is a modest transparency and maintenance gap rather than a severe risk.
The single workflow was fully analyzed with no dangerous audit findings or untrusted checkouts, but all four action references are unpinned, leaving them exposed to upstream reference changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aplus/http Version ^6.0 | — | — |
aplus/debug Version ^4.3 | — | — |
aplus/language Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.