Strong documentation, tests, release notes, and organization backing improve confidence in the project. Recent maintenance is quiet, and all 12 workflow action references are unpinned, leaving meaningful upkeep and build-integrity concerns.
62%
Total Score
67
50
94
100
The package declares 28 runtime dependencies, creating a relatively broad dependency surface for a starter application and increasing upgrade coordination needs.
The project has a long history with 34 releases and a roughly 29-day median interval, but it made no registry release in the last 12 months, indicating a substantial slowdown.
There were no commits and no active maintainers in the last 3 months, which is a meaningful sign of currently limited maintenance activity.
The repository has 12 open issues and 2 open pull requests, but none were created, closed, or merged in the last month, reinforcing the picture of quiet current activity.
All four workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 12 action references are unpinned, which weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
mezzio/mezzio Version ^3.18.0 | — | — |
dotkernel/dot-mail Version ^5.1.0 | — | — |
mezzio/mezzio-cors Version ^1.11.1 | — | — |
dotkernel/dot-cache Version ^4.1 | — | — |
laminas/laminas-form Version ^3.19.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.