The package includes tests, a README, and release notes, but has no security policy and uses one unpinned workflow action. Pin the workflow action and consider taking ownership before relying on it.
42%
Total Score
25
100
80
67
Only two releases were published, with the latest on March 20, 2020; there have been no releases in the last 12 months. This long release gap materially raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the package's multi-year release gap.
A single registry maintainer provides limited publishing continuity and bus-factor resilience for this user-owned project.
The linked repository has no security policy, reducing transparency for reporting and handling security issues in a package that processes proxy-trust data.
The workflow audit completed successfully with no dangerous findings, but its one action use is unpinned. The workflow has no top-level permissions block, which is acceptable on its own.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.