A clear LGPL license, included README, and GitHub release notes support practical adoption. The organization-backed project has two active contributors, while the workflow and security-documentation gaps merit routine review.
85%
Total Score
100
94
67
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and hygiene gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less clear.
The sole workflow uses a pull_request_target trigger without an untrusted checkout or script-injection sink, but its one action reference is unpinned; the audit itself completed fully.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/mime Version 7.4.* | — | — |
symfony/yaml Version 7.4.* | — | — |
symfony/asset Version 7.4.* | — | — |
symfony/console Version 7.4.* | — | — |
onelogin/php-saml Version ^4.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.