Extensive documentation, tests, and release notes make adoption easier. Unpinned workflow actions add a small maintenance risk, while the organization-backed project has no recorded recent issue activity.
66%
Total Score
75
100
93
100
The package is young at 182 days, with 18 releases concentrated in the first 36 days and a median interval of about 17 minutes. That shows early activity but not yet a settled maintenance pattern.
The repository recorded zero commits and zero active maintainers during the last three months. For a package only 182 days old, that pause is a real abandonment concern, though the release history shows substantial earlier activity.
The only workflow was fully analyzed with no untrusted checkout, injection, or audited findings. However, both action references are unpinned, leaving the workflow exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
dompdf/dompdf Version ^3.1 | — | — |
aws/aws-sdk-php Version ^3.373 | — | — |
monolog/monolog Version ^3.0 | — | — |
firebase/php-jwt Version ^7.0 | — | — |
intervention/image Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.