Frequent releases, recent commits, tests, and a security policy indicate an actively maintained project. Pinning is incomplete in its single workflow, and the pre-1.0 version signals a still-changing API.
68%
Total Score
100
100
83
83
The repository name does not match the package name and its README does not mention this package, so the source-to-package relationship is unclear. Organization backing and active repository work reduce abandonment concerns but do not resolve the identity gap.
The repository has 0 stars and 0 forks, with 1 watcher. This provides little external adoption evidence, but popularity is supporting evidence and does not outweigh the observed maintenance activity.
Version v0.6.16 is not a stable major release, so API compatibility may still change. It is not marked as a prerelease, which partly offsets that concern.
The single workflow was fully analyzed with no untrusted checkouts, script injection, or audit findings. All 4 action references are unpinned, however, leaving workflow dependencies exposed to moving upstream code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
webmozart/assert Version ^1.11 | — | — |
illuminate/support Version ^11.0 || ^12.0 || ^13.0 | — | — |
sebastian/exporter Version ^6.0 || ^7.0 | — | — |
gosuperscript/monads Version ^1.0.0 | — | — |
php-standard-library/php-standard-library Version ^3.2 || ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.