Minimal, reusable Config component.
68%
Total Score
75
90
50
The package has 39 releases since January 2016, but none in the last 12 months; its latest release was over a year ago. This suggests recently reduced maintenance activity, though the long release history shows established use.
The repository recorded no commits and no active maintainers in the last 3 months. The repository was pushed alongside the latest release, so this indicates a recent pause rather than clear abandonment.
No security policy was found in the repository. This is a transparency gap for a dependency, although it does not by itself indicate unsafe code.
Both analyzed workflows completed cleanly with no dangerous triggers, untrusted checkouts, or audit findings. However, both action references are unpinned, leaving the build exposed to dependency changes over time.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
brightnucleus/exceptions Version >=0.4 | — | — |
symfony/options-resolver Version >=2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.