Documentation, tests, a changelog, and MIT licensing are all in place. The security policy and automated scanning add useful maintenance support.
78%
Total Score
75
93
83
This is the only published release, issued 43 days ago, so registry maturity is limited. However, the repository shows substantial recent activity and the release includes notes for this exact version.
Two contributors were active in the last three months, and the second contributed 42% of commits; the contributor base is still small but not dependent on one person alone.
All five workflows were analyzed and all 61 action references are pinned, but one workflow grants top-level write permissions and high-confidence template-injection findings were reported. No untrusted checkout or script-injection trigger was found, so this is workflow hygiene rather than a severe dependency-health risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/container Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.