The package has a clear README, an MIT license, release notes, and static analysis configured, which support adoption. Unpinned workflow actions and no published security policy add avoidable maintenance and supply-chain hygiene concerns.
57%
Total Score
75
100
94
75
The latest release was published over two years ago, with no releases in the last 12 months and only three releases overall. This indicates materially slowing maintenance for a package handling database backups.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the long release gap and increasing abandonment risk.
The repository has no published security policy, leaving vulnerability reporting and handling expectations unclear for a package that manages database backups and remote storage.
Both workflows were analyzed successfully and contain no untrusted checkouts, injection findings, or excessive top-level permissions. However, all 16 action references are unpinned, which is a supply-chain hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/process Version ^4.4 || ^5.4 || ^6.0 || ^7.0 | — | — |
league/flysystem Version ^2.1.1 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.