It also includes tests, a changelog, release notes, a security policy, and automated security scanning. Two contributors are active, though one makes 82% of recent commits and all seven workflow action references are unpinned.
84%
Total Score
83
100
83
Two contributors were active in the last 3 months, but the leading contributor made 82% of commits. The second active contributor partly offsets this concentration, so it is a moderate resilience concern.
All three workflows were analyzed with no script-injection, untrusted-checkout, or audit findings, and none grants top-level write access. However, all seven action references are unpinned, which leaves build inputs less reproducible.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 | — | — |
filp/whoops Version ^2.9 | — | — |
catfan/medoo Version ^2.1 | — | — |
melbahja/seo Version ^2.0 | — | — |
voku/anti-xss Version ^4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.