The repository includes tests, a security policy, dependency scanning, and a matching package reference. Two contributors remain active, with no deprecation or archive status; workflow references are unpinned, but the audit concern is low-confidence cache hygiene.
82%
Total Score
100
100
94
100
The package is 590 days old with five releases and one release in the last 12 months, indicating a modest rather than rapid cadence. The current release is recent, which partly offsets the limited historical activity.
All six workflow action references are unpinned, which weakens build reproducibility. The reported cache-poisoning findings are low-confidence hygiene concerns, while the audit found no untrusted checkout, script injection, or broad top-level write permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^2.0 || ^3.0 | — | — |
phpnexus/cwh Version ^3.2 | — | — |
illuminate/log Version ^12.0 || ^13.0 | — | — |
aws/aws-sdk-php Version ^3.300 | — | — |
monolog/monolog Version ^3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.