Simple copying and handling of translation dictionaries
62%
Total Score
75
93
75
Only one release has been published, with no demonstrated release cadence yet; the package is still relatively new, so long-term maintenance remains unproven.
The repository recorded zero commits and zero active maintainers in the last three months, despite being unarchived and pushed more recently; this weakens evidence of active maintenance.
No security policy is present in the repository, leaving vulnerability-reporting expectations undocumented for a library intended to be consumed by other projects.
All five workflow action references are unpinned, and the audit found a high-confidence condition that always evaluates to true. The workflow has no untrusted checkout or script-injection path, which limits the impact to build hygiene rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0 || ^3.0 | — | — |
symfony/dependency-injection Version ^5.4 || ^6.0 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.