Clear documentation, tests, and release notes make integration easier. Recent activity is quiet, and every analyzed GitHub Actions reference is unpinned; the workflows otherwise use read-only permissions and raised no audit findings.
68%
Total Score
50
75
67
The package has existed for about 9 years with 17 releases, but only one release in the last 12 months, indicating a quieter maintenance pace.
There were zero commits and zero active maintainers in the last 3 months, a meaningful sign that maintenance may have slowed after the latest release.
Composer is used for the build, but no security scanning tool was detected, leaving a modest repository hygiene gap.
The repository has no security policy, making vulnerability reporting and response expectations less transparent.
This is a non-prerelease v0.4.0 release, which is stable within its current version line, though the 0.x major version signals a less mature compatibility contract.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.