The package is clearly licensed, documented, and backed by a repository with tests and a security policy. Its organization backing and recent release help, but the long release interval and limited recent activity reduce confidence in ongoing maintenance.
70%
Total Score
75
92
100
The package has only 3 releases since July 2022, with a median interval of about 708 days and just 1 release in the last 12 months. The release in June 2026 shows it is not abandoned, but the cadence is slow.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the recent push and release provide some compensating evidence, current development activity is limited.
The sole workflow was fully analyzed, uses read-only permissions, and has no detected injection or high-severity findings. However, all 12 action references are unpinned, leaving a workflow supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
initphp/validation Version ^2.0 | — | — |
initphp/parameterbag Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.