84%
Total Score
healthy
Healthy; regular releases and recent two-person maintenance outweigh workflow pinning and archived-action concerns.
No repository security policy was found, which leaves vulnerability reporting and response guidance less transparent.
The single workflow was fully analyzed with no untrusted checkout or script-injection findings, but all four action references are unpinned and one archived action was detected at high confidence. The workflow has no top-level permissions block, which is common and not harmful on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.3 | — | — |
doctrine/orm Version ^2.20|^3.0 | — | — |
doctrine/dbal Version ^3.6|^4.0 | — | — |
moneyphp/money Version ^3.2|^4.0 | — | — |
symfony/config Version ^7.4.1|^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.