The package is documented, tested, licensed, and has a matching organization-backed repository. Its workflows leave all 16 action references unpinned, and no commits or merged pull requests were recorded in the last three months.
58%
Total Score
63
50
89
75
No commits and no active maintainers were recorded in the last three months, a strong sign that maintenance has currently stalled.
Fourteen runtime dependencies make this framework relatively broad and increase transitive maintenance exposure, though the profile is explicit and no severe dependency issue is shown.
There are 15 releases over roughly 2 years and 8 months, but no releases in the last 12 months, which indicates a meaningful recent maintenance gap.
The repository has 13 open pull requests, but none were merged in the last month and no issues were closed, suggesting backlog or reduced responsiveness.
Ten stars and no forks indicate limited adoption and external validation. Popularity is supporting evidence only, so this modestly lowers confidence in maturity rather than making the package unfit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/log Version ^v2.0.0 | — | — |
amphp/file Version ^3.2.0 | — | — |
crell/serde Version ^1.5.0 | — | — |
ramsey/uuid Version ^4.9.0 | — | — |
adhocore/cli Version ^1.9.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.