Organization backing and clear licensing add useful reassurance. The project is very new, with all recent commits from one contributor and workflow actions left unpinned.
68%
Total Score
67
100
92
75
The package is only 55 days old and has three releases, all clustered within roughly four hours; this shows activity but offers little long-term maintenance history.
All two recent commits came from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown.
Two commits were recorded in the last three months, so there is some recent activity, but the volume is too small to demonstrate an established maintenance pattern.
The repository has no security policy, leaving vulnerability-reporting expectations and handling procedures unclear for an integration library.
The workflow audit was complete and found no dangerous triggers or audit findings, but both of its two action references are unpinned, weakening build reproducibility and update safety.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
dappcore/php Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.