Clear documentation, tests, release notes, and licensing make this straightforward to adopt. Its small audience and absent security policy reduce assurance, while the organization-owned project provides some continuity.
78%
Total Score
83
93
50
All five recent commits came from one contributor, creating a genuine continuity risk; organization ownership provides some ability to hand maintenance off but does not remove the concentration.
The repository has only 1 star and 3 forks, so there is limited public adoption evidence; this is supporting context rather than a decisive health problem.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented for a data-handling library.
Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, or audit findings, but 6 of 7 action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
horde/exception Version ^3 || dev-FRAMEWORK_6_0 | — | — |
horde/compress_fast Version ^2 || dev-FRAMEWORK_6_0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.