This is a mature, actively released, stable package with 129 releases since 2021, 17 releases in the last 12 months, a current non-archived repository, clear MIT licensing, repository tests and changelog coverage, and a repository that clearly matches the package. The main concerns are that all recent commits come from one contributor, the package uses install and update lifecycle scripts, the repository has no security scanning tooling, and its GitHub workflow grants top-level write permissions. These are meaningful supply-chain and continuity considerations, but they are moderated by strong release activity, documented project structure, a security policy, safe workflow patterns, and the absence of registry deprecation.
82%
Total Score
50
100
89
80
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
timber/timber Version ^2.2 | — | — |
symfony/finder Version ^7.0 | — | — |
composer/installers Version ^1.0 || ^2.0 | — | — |
stoutlogic/acf-builder Version ^1.12 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.