The package includes tests, a clear README, a matching repository, and a recent release. Its single-person ownership and missing security policy limit confidence for long-term maintenance.
68%
Total Score
75
100
94
67
The package has been released since 2020 and has a release in the last 12 months, but only one release in that period suggests slower recent cadence than its historical 25-day median interval.
The repository recorded no commits and no active maintainers during the last three months. The recent release partly offsets this, but the current lack of development activity raises maintenance concern.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear for a package intended to be used as a library.
The workflow audit completed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all 9 action references are unpinned, reducing build reproducibility and integrity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.1|^2.0 | — | — |
hjerichen/collections Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.