Documentation, licensing, and project tooling are in good shape. The small repository footprint offers limited evidence of long-term support.
58%
Total Score
50
100
79
50
The latest release was over five years ago, with no releases in the past 12 months. Its earlier 12-release history shows the project was once active, but current maintenance is a substantial concern.
The repository recorded no commits and no active maintainers in the past three months, consistent with the package's long release gap and raising abandonment risk.
The repository has no security policy, leaving vulnerability-reporting guidance undocumented. This is a transparency gap, but it is less serious than the clear maintenance slowdown.
Version 0.9.12 is not a stable major release, although it is not marked as a prerelease and recent releases contain no prerelease versions.
The single workflow was fully analyzed with no reported audit findings or dangerous triggers, but all three action references are unpinned and the workflow has no top-level permissions block.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.1|^2.0 | — | — |
symfony/polyfill-php80 Version ^1.20 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.