A complete README, repository tests, and matching source repository improve transparency. Missing security policy and unpinned workflow actions leave maintenance and build hygiene weaker.
58%
Total Score
50
90
50
Only two releases exist, both published in February 2022, with no release in roughly four years. The stable version and non-deprecated status provide some compensation, but this is a meaningful maintenance concern.
The repository recorded zero commits and zero active maintainers in the last three months. Its last push was in September 2024, so recent maintenance capacity appears limited.
The repository has no security policy. This reduces transparency for reporting and handling vulnerabilities, although the package's small scope limits how strongly this weighs.
The single workflow was fully analyzed with no reported audit findings or untrusted execution paths, but all 9 action references are unpinned. That leaves avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.1 || ^2.0 | — | — |
league/container Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.