It includes a README, repository tests, release notes, and a clear BSD-3-Clause license. The small user-owned project has no security policy, and all six workflow actions are unpinned.
67%
Total Score
50
100
86
75
No commits and no active maintainers were recorded in the last three months. The recent release and repository push partly offset this, but the current development pace remains uncertain.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users have no documented reporting or response process for vulnerabilities.
Version 0.9.0 is not a stable major release, so compatibility may still change, although it is not marked as a prerelease and recent releases have been stable.
All three workflows were analyzed without dangerous triggers or audit findings, but all six action references are unpinned, reducing build reproducibility and increasing exposure to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/simple-cache Version ^1.0 | — | — |
brokeyourbike/http-enums Version ^2.0 | — | — |
brokeyourbike/http-client Version ^1.0 | — | — |
brokeyourbike/resolve-uri Version ^1.0 | — | — |
brokeyourbike/has-source-model Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.