The official agent PHP for Forest
10%
Total Score
50
50
83
Packagist marks the entire package as abandoned with no replacement, which is a severe adoption risk despite the stable release version.
The package had 104 releases and a historically frequent cadence, but it has had no releases in the last 12 months, showing that maintenance has stopped.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of ongoing development capacity.
The linked repository is archived, indicating the project is no longer maintained through its source repository. Its last push was in July 2025.
All 10 analyzed action references are unpinned, and the audit found a high-confidence unpinned container image plus an archived action. No untrusted checkout or script-injection path was found, but the remaining workflow hygiene is poor.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
league/csv Version ^9.8 | — | — |
ramsey/uuid Version ^3.9.7|^4.3 | — | — |
doctrine/orm Version ^2.7.3 | — | — |
nesbot/carbon Version ^2.58 | — | — |
php-di/php-di Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.