Tests, documentation, licensing, and release notes are all present, with organization backing and security scanning. The project is not archived, but its missing security policy leaves a modest transparency gap.
64%
Total Score
75
94
50
The package has 11 releases since June 2021, but its latest release was 16 months ago and it had no releases in the last 12 months. This indicates a meaningful maintenance slowdown, though the release history is established rather than abandoned outright.
The repository had zero commits and zero active maintainers during the last 3 months. Combined with no registry releases in the last 12 months, this lowers confidence that fixes will arrive promptly.
The repository has no security policy. This is a modest transparency gap for reporting vulnerabilities, but it is not evidence that the package is unsafe to use.
The only workflow was fully analyzed with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 7 referenced actions are unpinned, leaving avoidable workflow supply-chain exposure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
moneyphp/money Version ^4.0 | — | — |
cakephp/cakephp Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.