The matching license, tests, small dependency set, and organization-backed repository support a straightforward, established adapter. Maintenance and workflow hygiene are weaker, so future fixes may arrive slowly and builds are less reproducible than they should be.
63%
Total Score
75
100
88
75
The package has existed for about six years and released once in the last 12 months, but its median release interval is about 13 months, indicating a slow maintenance cadence.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the slow release cadence and raising the risk that fixes may be delayed.
Composer is used for builds, but no security scanning tool was detected, leaving a transparency and maintenance-hygiene gap.
The repository has no security policy, so its process for reporting and handling vulnerabilities is not documented.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all four action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fusio/engine Version ^6.0 | — | — |
symfony/ldap Version ^6.0|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.