The package has clear documentation, tests, and organization backing. Its workflow has no detected dangerous findings, but unpinned actions leave a supply-chain hygiene gap.
68%
Total Score
67
100
94
100
The repository recorded zero commits and zero active maintainers in the last three months. Although registry releases remain regular, this is a meaningful maintenance warning because source activity has currently stalled.
Three issues were opened in the last month, but no issues or pull requests were closed or merged and no pull requests were opened. This indicates limited visible issue-resolution activity.
Composer is used for the build, but no security scanning tools were detected. The missing scanning coverage is a modest repository hygiene concern, not evidence of unsafe code.
The single workflow was fully analyzed with no audit findings, dangerous triggers, untrusted checkouts, or script injections. However, all three referenced actions are unpinned, so their contents are not fixed to immutable revisions.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^6.5 || ^7.0 | — | — |
facebook/capi-param-builder-php Version ^1.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.