The package has clear documentation, tests, release notes, and organization backing. Its workflows are fully analyzed but use seven unpinned actions, and the repository reports no security-scanning tooling.
66%
Total Score
75
50
88
100
Six runtime dependencies, including the AWS SDK and Laminas components, create ordinary compatibility and update obligations for an integration module but do not indicate an excessive dependency surface.
The package has 17 releases over roughly 13.5 years, but no release in the last 12 months; this indicates slowing maintenance rather than abandonment on its own.
No commits and no active maintainers were recorded in the last 3 months, reinforcing the concern raised by the lack of recent registry releases.
The repository uses Make and Composer, but no security-scanning tooling was detected; this is a modest transparency and maintenance gap.
All five workflows were analyzed with no reported audit findings or untrusted-checkout sinks, but all seven action references are unpinned and two workflows grant top-level write permissions; this is a meaningful hygiene concern, not a severe risk by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version ^3.338.0 | — | — |
laminas/laminas-view Version ^2.8 | — | — |
laminas/laminas-filter Version ^2.9.0 | — | — |
laminas/laminas-session Version ^2.7.0 | — | — |
laminas/laminas-servicemanager Version ^3.0 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.