The repository includes tests, a license, security policy, and a recent release. Maintenance is concentrated in one contributor, and all eight workflow actions are unpinned, leaving meaningful continuity and build-integrity concerns.
72%
Total Score
75
50
100
100
The release declares 10 runtime dependencies for a small HTTP service, which adds maintenance surface but is not excessive for its framework-based design.
One contributor made all three commits in the last three months, giving the repository a single-person operational dependency. Organization backing provides some potential handoff capacity, but no second active contributor is shown.
There were three commits in the last three months, so activity has not stopped, but it is modest and comes from only one active maintainer.
All four workflows were analyzed without failed files or dangerous-trigger sinks, but all eight action references are unpinned. That weakens build reproducibility and makes action changes harder to control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
utopia-php/di Version 0.3.* | — | — |
utopia-php/cli Version ^0.24 | — | — |
utopia-php/dsn Version ^0.2.1 | — | — |
utopia-php/http Version ^2.0@RC | — | — |
utopia-php/fetch Version 0.5.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.