The repository includes tests, a changelog, security policy, and static analysis. Four install-time scripts and four unpinned workflow actions warrant a little review, while two active contributors provide recent capacity.
84%
Total Score
83
100
100
83
The package runs post-install and post-update scripts, which add installation-time behavior and deserve review even though no other provided signal shows misuse.
Two contributors are active, although the top contributor made about 70% of the 37 recent commits; the second contributor provides some continuity but the base remains small.
The sole workflow was fully analyzed, uses read-only permissions, and has no detected high-confidence findings or untrusted checkout risks. All four referenced actions are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
danog/php-rtc-av Version ^1.1.3 | — | — |
danog/php-rtc-exception Version ^1.1.5 | — | — |
danog/php-rtc-rtp-parameter Version ^1.1.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.