Repository tests, release notes, and an active organization-owned project provide useful maintenance evidence. The lack of recent commits and fully unpinned workflow actions leave meaningful upkeep and build-integrity concerns.
62%
Total Score
67
100
89
88
The package has only four releases and none in the last 12 months; its latest registry release was about two years ago, which points to slowed maintenance.
No commits and no active maintainers were observed in the last three months, weakening evidence of ongoing maintenance.
There are no open issues and one open pull request, but no issues or pull requests were merged in the last month, consistent with limited current activity.
Composer and Make are used for builds, but no security-scanning tools were detected, leaving a modest repository hygiene gap.
All four workflows were analyzed without dangerous triggers, sinks, or audit findings, but all eight action references are unpinned, so build inputs can change without a reviewed version update.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nette/utils Version ^4.0.3 | — | — |
league/flysystem Version ^2.5.0 || ^3.23.0 | — | — |
psr/event-dispatcher Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.