The package includes tests, a useful README, an MIT license, and no install-time scripts. Its organization backing, current release, and automated dependency updates add confidence.
76%
Total Score
83
100
94
67
The package has 77 releases over about 5 years and a latest release on the assessment date, but only 2 releases in the last 12 months indicate a slower recent cadence.
Only 2 commits were recorded in the last 3 months, showing limited recent development activity despite the current release.
The repository has no SECURITY.md or other declared security policy, leaving vulnerability-reporting expectations unclear.
The sole workflow was fully analyzed with no untrusted checkout or script-injection findings, but all 11 action references are unpinned and the auditor reported a low-confidence high-severity unpinned-image finding. This is workflow hygiene risk rather than a standalone dependency blocker.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
chialab/ip Version ^1.0 | — | — |
bedita/core Version ^5.48 | — | — |
bedita/i18n Version ^4.0 | — | — |
cakephp/cakephp Version ^4.5 | — | — |
cakephp/twig-view Version ^1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.