The package includes tests, a changelog, and a clear MIT declaration. Organization backing and recent activity help, but authentication code lacks a documented security-reporting path.
70%
Total Score
83
100
50
All 85 recent commits came from one contributor. Organization backing reduces the handoff concern somewhat, but no second active contributor is shown.
The repository has no security policy. That is a meaningful transparency gap for an authentication package because users have no documented reporting route.
The workflow is fully analyzed with no trigger or audit findings, and its job-level permissions are scoped; however, all 8 action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ez-php/http Version ^2.0 | — | — |
ez-php/cache Version ^2.0 | — | — |
ez-php/console Version ^2.0 | — | — |
ez-php/contracts Version ^2.0 | — | — |
ez-php/rate-limiter Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.