The small, self-contained package is easy to inspect and integrate, with tests and no install-time scripts. Its CI references are all unpinned and the repository has no security policy, so pin a tested version before adopting it.
61%
Total Score
75
88
75
The package has seven releases since October 2020, but its latest release was in April 2024 with no releases in the last two years, which raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with more than two years since the last push and indicating stalled maintenance.
Composer is used for builds, but no security scanning tooling is configured; this is a modest transparency and assurance gap for an otherwise small package.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed with no high- or medium-confidence findings, but all three action references are unpinned, allowing referenced action code to change over time.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.