Clear documentation, tests, and release notes make integration straightforward. No contributors were active in the last three months, and every workflow action is unpinned. Organization backing, recent releases, and a non-archived repository provide useful continuity.
76%
Total Score
67
100
94
88
Only one registry publishing account is listed, which is a limited publishing base; the organization-backed repository provides some compensation, so this is only a mild concern.
No commits or active maintainers were recorded in the last three months, which weakens evidence of current maintenance despite the recent release and repository push.
Composer build tooling is present, but no security scanning tools were detected. For this small library that is a hygiene gap rather than a severe maintenance risk.
The sole workflow was fully analyzed with no untrusted checkout, injection, or audit findings, but all 11 action references are unpinned, leaving builds exposed to action changes over time.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.