Clear documentation, tests, and a matching source repository make the project easy to inspect. Apache-2.0 licensing, a small dependency set, and no install scripts reduce adoption friction.
68%
Total Score
50
94
75
The repository is owned by an individual user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
The package has 10 releases over about 2 years and 1 release in the last 12 months; the recent cadence is slower than its roughly 35-day historical median, despite a release on March 27, 2026.
One contributor made 100% of the recent commits, which creates a clear handoff and continuity risk for this user-owned project.
The repository had 4 commits in the last 3 months, but all were made by one active maintainer, leaving maintenance dependent on a single person.
All five workflows were analyzed, but one uses an untrusted checkout with broad top-level write permissions, and a separate workflow uses a high-confidence floating latest container image; all 29 action references are unpinned.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symfony/console Version ^6.4|^7.0 | — | — |
guzzlehttp/guzzle Version ^7.8 | — | — |
elephantio/elephant.io Version 5.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.