The repository is backed by an organization, includes tests, and uses security scanning. Its workflows use seven unpinned actions and one archived action, while no commits landed in the last three months.
68%
Total Score
75
100
94
75
The package has four releases over about 34 months, but none in the last 12 months and the latest release was about 20 months ago, indicating slowed maintenance.
No commits and no active maintainers were recorded in the last three months, reinforcing the release-history concern about currently quiet maintenance.
No repository security policy was found, leaving vulnerability-reporting guidance undocumented.
Both workflows were analyzed successfully with no untrusted checkout or script-injection findings, but all seven action references are unpinned and one high-confidence medium-severity finding uses an archived action.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/http-message Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.