A template repository for setting up a new PHP library package.
52%
Total Score
caution
Usable with caveats: no release for nearly five years and no recent commits signal stalled maintenance.
The package has had no release in nearly five years and none in the last 12 months, with only four releases overall. This is the strongest evidence of stalled maintenance despite the repository not being archived.
There were zero commits and zero active maintainers in the last three months, reinforcing the lack of recent release activity. The repository's unarchived status does not compensate for absent current work.
The single workflow was fully analyzed with no dangerous findings, but all five action references are unpinned. The lack of a top-level permissions block is acceptable on its own, while unpinned actions leave a build-integrity hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.