The package has a clear README, release notes, repository tests, a security policy, and Composer audit tooling. Workflow references are unpinned, though the audit found no injection or high-severity findings.
58%
Total Score
0
88
75
The repository recorded 0 commits and 0 active maintainers in the last three months, while its last push was about five months ago. That is meaningful evidence of stalled maintenance for a young package.
All 28 releases were published within one day, with a median interval of 0 days. This suggests a concentrated initial release burst rather than demonstrated long-term release maintenance.
Although this is marked as a stable major release, 75% of recent releases are prereleases, which makes the version track look unsettled.
Both of the two analyzed action references are unpinned, weakening build reproducibility. The workflow audit was complete and found no injection, untrusted-checkout, or high-severity findings, which limits the concern to hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.