It has a clear README, repository tests, a stable release, and no install-time scripts. Recent repository commits are absent, and both workflow action references are unpinned, so maintenance and build hygiene merit attention.
76%
Total Score
75
100
86
83
The repository recorded zero commits and zero active maintainers in the last three months. The recent release and push provide some compensation, but the lack of observed development activity is a maintenance caution.
The repository has 7 stars, 0 forks, and 2 watchers, indicating a small user and contributor base. Low popularity is supporting caution only, since release and repository evidence show the project is still maintained.
Composer is used for builds, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.
Both workflows analyzed successfully with no reported audit findings or untrusted checkouts. However, all 2 of 2 action references are unpinned, which leaves build inputs less reproducible; the pull_request_target trigger has no dangerous sink here.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.