Tests, documentation, licensing, and security scanning provide a solid foundation. The alpha API and minimal workflow pinning call for care when upgrading.
61%
Total Score
75
86
50
Only two releases have been published since April 2023, with no release in about 18 months; this indicates slow maintenance for a dependency.
There were no commits and no active maintainers in the last three months, consistent with the long gap since the latest release and raising abandonment risk.
No repository security policy was found, leaving vulnerability-reporting guidance and response expectations unclear.
Version 0.1.1 is not a stable major release, and the project documentation describes the public API as alpha and subject to change.
The only workflow scopes permissions read-only and has no detected audit findings, but all four action references are unpinned, weakening build reproducibility and update safety.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/collections Version ^1.8|^2.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.