The stable release, small dependency set, repository tests, clear README, and organization ownership provide useful continuity. Workflow references are all unpinned, including one archived action, so build hygiene deserves attention.
58%
Total Score
75
100
93
100
The package has had only three releases and none in the last three years and seven months; the latest release was published in February 2023. This is a meaningful maintenance concern for a dependency, despite its established age.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap. The package may be stable, but there is no recent evidence of active maintenance.
All four analyzed action references are unpinned, and the audit found one high-confidence medium-severity use of an archived action. No untrusted checkout, script injection, or broad top-level write permission was found, limiting this to a hygiene concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
hyperf/di Version ^3.0 | — | — |
hyperf/pimple Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.