Strong documentation, tests, release notes, and organization backing support adoption. The roughly 11-month release gap, no commits in three months, and unpinned workflow actions warrant caution.
67%
Total Score
75
100
94
83
Seven releases since March 2025 show an established release history, but the latest release was about 11 months ago and recent cadence is sparse.
No commits and no active maintainers were recorded in the past three months, which is consistent with the extended release pause and raises maintenance risk.
All four workflows were analyzed with no audit findings or untrusted checkout and script-injection patterns, but all nine action references are unpinned, leaving avoidable update and supply-chain exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 || ^2.0 | — | — |
psr/http-message Version ^1.0 || ^2.0 | — | — |
mezzio/mezzio-fastroute Version ^3.12 | — | — |
psr/http-server-middleware Version ^1.0 | — | — |
laminas/laminas-stratigility Version ^3.0 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.