It has a clear README, repository tests, a matching source tree, and MIT licensing. Its pre-1.0 status, absent security policy, and unpinned CI actions add maintenance and hygiene concerns.
62%
Total Score
75
100
88
83
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may be slowing.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so vulnerability-reporting and response expectations are not documented.
Version v0.12.1 is not a stable major release, so compatibility may change before 1.0 even though it is not marked as a prerelease.
All three workflows were analyzed successfully with no dangerous triggers, sinks, or audit findings. However, all six action references are unpinned, which weakens build reproducibility and action supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
imedge/json Version >=0.1 | — | — |
freedsx/asn1 Version ^0.4.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.