Clear documentation, repository tests, and a small dependency surface support adoption. Three months without commits leave maintenance capacity uncertain, while inherited workflow secrets and entirely unpinned actions warrant review.
68%
Total Score
67
100
89
75
Only one registry account has publish access, which is a modest resilience concern; organization ownership provides some backing, so this is not severe on its own.
The repository recorded zero commits and zero active maintainers in the last three months. A release and a recent push provide some compensating evidence, but current maintenance activity remains thin.
The repository has no stars or forks and one watcher. This offers little external validation, but popularity is supporting evidence rather than a verdict for a small package.
Composer build tooling is present, but no security scanning tools were detected. This is a hygiene gap rather than evidence that the release is unsafe.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
innmind/foundation Version ~2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.