Clear documentation, tests, changelog, and licensing make integration easier. The small dependency surface and organization ownership reduce operational friction.
72%
Total Score
83
100
89
100
All 11 recent commits came from one contributor, creating a meaningful continuity risk if that person becomes unavailable.
The repository has no stars, forks, or watchers. This is weak supporting evidence, but it does not outweigh the observed maintenance activity.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest security-process gap.
Both workflows were fully analyzed with no unsafe checkout, script-injection, or auditor findings. However, all four action references are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
php-http/discovery Version ^1.19 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.