The project has a recent stable release, repository tests, release notes, and active organizational ownership. Maintenance has paused for about 10 months, while all 13 workflow actions are unpinned and no security policy is published.
68%
Total Score
75
100
94
75
The package has existed since December 2021 with 11 releases and one release in the last 12 months. The roughly 10-month gap since the latest release is a mild maintenance concern, but not evidence of abandonment by itself.
There were zero commits and zero active maintainers in the last three months. Because a release occurred about 10 months ago, this indicates slowed current maintenance rather than clear abandonment, but it lowers confidence in prompt fixes.
The repository has five open issues and one open pull request, but no issues or pull requests were created or merged in the last month. This supports the broader indication of currently quiet maintenance.
The repository has no published security policy. This is a transparency and vulnerability-reporting gap, though it is not by itself evidence that the package is unsafe.
All six workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injections, or audit findings. However, all 13 action references are unpinned, leaving build dependencies exposed to upstream changes; the absence of top-level permissions is not a concern here, with no top-level write permissions detected.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cycle/orm Version ^2.10 | — | — |
psr/container Version ^1.0|^2.0 | — | — |
cycle/database Version ^2.14 | — | — |
yiisoft/injector Version ^1.0 | — | — |
cycle/schema-builder Version ^2.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.