The project is small but has a clear README, repository tests, and a modest dependency footprint. Its short history and unpinned workflow actions leave less evidence of long-term reliability; pin this version while it matures.
78%
Total Score
100
100
88
50
This is the sole release and the package is only 23 days old, limiting evidence of long-term stability. Recent repository activity partly compensates for the short registry history.
Composer build tooling is present, supporting reproducible project workflows, although no security scanning tool was detected.
The repository has no security policy, which reduces transparency for reporting and handling vulnerabilities, though this is a modest gap for a small utility.
The only workflow was fully analyzed and has no reported audit findings or untrusted checkouts, but both of its two action references are unpinned, leaving them exposed to upstream changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.