Converts a selector and token pair to base64 forth and back.
60%
Total Score
caution
Usable with caveats: maintenance stopped in January 2023 and workflow dependencies are unpinned.
The package has 15 releases since December 2016, but its latest release was in January 2023 and it had no releases in the last 12 months, indicating prolonged maintenance inactivity.
The repository recorded no commits and no active maintainers in the last three months; together with the old latest release, this raises abandonment risk.
Composer build tooling is present, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy. This does not make the package unsafe by itself, but it weakens the project's documented process for handling vulnerabilities.
The workflow audit completed cleanly with no injection or high-severity findings, but all three action references are unpinned, leaving builds exposed to changing upstream action code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.