Tests, a README, release notes, and an organization-backed repository make the package easier to evaluate. GitHub Actions references are all unpinned, so releases depend on mutable workflow actions.
67%
Total Score
75
94
67
No license declaration, license file, or repository license file was detected, leaving the release without clear usage terms.
No commits and no active maintainers were observed during the last 3 months, which is a maintenance concern despite the recent release.
No repository security policy was found, leaving vulnerability-reporting expectations unclear.
Both workflows were analyzed without audit findings and the pull_request_target workflow has no untrusted checkout or script-injection sink. However, all 12 action references are unpinned, so workflow dependencies can change without a version pin.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
bedita/core Version ^6.0 | — | — |
lcobucci/jwt Version ^4.2.1 | — | — |
aws/aws-sdk-php Version ^3.222 | — | — |
cakephp/cakephp Version ^5 | — | — |
league/flysystem Version ^3.30.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.