Recent release activity shows the package is still published regularly, with 16 releases in the last year. However, no maintainers made commits in the last 3 months, and all 10 workflow actions are unpinned with a high-confidence secrets-inherit finding.
68%
Total Score
75
100
100
100
The repository recorded zero commits and zero active maintainers during the last 3 months. Although releases remain frequent, the absence of recent contributor activity is a real maintenance concern.
All seven workflows were analyzed without failures and have no untrusted checkout or script-injection findings, but all 10 action references are unpinned. The high-confidence medium-severity secrets-inherit finding in reviewers.yaml adds workflow hygiene risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ibexa/core Version ~5.0 | — | — |
ibexa/design-engine Version ~5.0 | — | — |
symfony/http-kernel Version ^7.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.