The package includes tests, a clear MIT license, and no install-time scripts. Its workflow permissions and unpinned actions leave less safety margin for maintenance and release changes.
67%
Total Score
50
100
89
75
The repository is owned by an individual user rather than an organization, so the single-contributor maintenance concentration has no visible organizational handoff support.
There were only two releases over about 17 months, with one release in the past 12 months and an interval of about 17 months, indicating a slow release cadence.
One contributor made 100% of the recent commits, leaving maintenance dependent on a single individual.
Only one commit was recorded in the past three months, showing limited recent maintenance activity.
The repository has only 2 stars, 0 forks, and 1 watcher, offering little community evidence; popularity is supporting evidence rather than a verdict.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
myclabs/php-enum Version ^1.8 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.