The package includes tests, a clear MIT license, and a complete source tree, but its workflow uses two unpinned actions. Long-term support cannot yet be judged from a release published today.
66%
Total Score
50
100
88
75
This is the package's only release, published today, so there is no track record for release consistency or sustained maintenance.
There were no commits or active maintainers in the last three months, but the package was created and pushed today, so this is mainly an absence of history rather than evidence of abandonment.
Composer is used as the build tool, but no security scanning tool is configured, leaving a modest repository hygiene gap.
The repository has no security policy, reducing guidance for reporting vulnerabilities in a package intended for application use.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.