The package has a clear README, comprehensive tests, an MIT declaration, active recent development, and organization backing. Its release cadence is unusually intense, and the project lacks a security policy, so long-term process maturity is less certain.
70%
Total Score
83
100
94
67
There have been 54 releases in 166 days, with a median interval of about 2 hours. This shows strong activity but an unusually intense cadence for a young project, which modestly reduces maturity confidence.
All 73 recent commits came from one contributor, leaving maintenance dependent on a single active developer. Organization backing provides some handoff capacity but does not remove the concentration risk.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.
The workflow audit completed cleanly with no untrusted checkouts, script injection, or high-severity findings, and job-level permissions are used. However, all 8 action references are unpinned, so workflow dependencies can change without a reviewed commit.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ez-php/bignum Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.