Tests, release notes, and a security policy provide useful project evidence, while organization backing reduces concern about the single registry maintainer. Recent maintenance is limited, and every analyzed workflow action is unpinned.
65%
Total Score
75
100
89
83
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern despite recent release activity.
One star and one fork indicate a very small user and contributor footprint; popularity is only supporting evidence, but it provides little external maintenance signal here.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and assurance gap.
All five workflows were analyzed with no audit findings or untrusted checkouts, but all eight action references are unpinned and two workflows grant top-level write permissions, creating workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doppar/axios Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.