A single shared source of truth for your PHP apps
61%
Total Score
75
92
50
The package is 526 days old with 10 releases, but only 1 release in the last 12 months; this indicates a sharp slowdown in delivery for a still-young package.
There were no commits and no active maintainers in the last 3 months, which weakens evidence of ongoing maintenance despite the repository not being archived.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
The sole workflow was fully analyzed with no dangerous sinks or audit findings, but all 7 referenced actions are unpinned, leaving builds exposed to changing upstream action content.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0.2 | — | — |
decodelabs/kingdom Version ^0.2 | — | — |
decodelabs/enumerable Version ^0.2.8 | — | — |
decodelabs/exceptional Version ^0.6.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.