The package is licensed, documented, and backed by repository tests with a stable 8.0 release. Its small public footprint and unpinned workflow actions reduce resilience and release-process assurance.
72%
Total Score
75
100
94
50
Both recent commits came from one contributor, giving the project a thin current contributor base. Organization backing provides some handoff capacity, but no second recent contributor is shown.
The repository has only 4 stars and 0 forks, so there is limited external adoption evidence. This is supporting context rather than a maintenance verdict.
The repository has no security policy, reducing the transparency of vulnerability reporting and response expectations.
The workflow audit was complete and found no dangerous sinks, uses read-only permissions, and reported no audit findings. However, all 9 action references are unpinned, leaving the build exposed to moving action contents.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
jbzoo/data Version ^8.0 | — | — |
jbzoo/utils Version ^8.0 | — | — |
wikimedia/less.php Version >=5.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.