Documentation, tests, release notes, and a security policy make integration straightforward. Composer tooling, Dependabot, and a clean workflow audit provide useful maintenance safeguards.
65%
Total Score
50
100
88
75
The repository recorded zero commits and zero active maintainers over the last three months. This is the strongest abandonment concern despite the recent release and repository push.
The manifest declares MIT, while the artifact license file is detected as Apache-2.0; although a license is present, the mismatch needs clarification before adoption.
The package has existed for about 8 years with 12 releases and a recent release in June 2026, but only one release occurred in the last 12 months, indicating a slower current cadence.
The single workflow was fully analyzed with no audit findings, unsafe triggers, or untrusted checkouts. Both action references are unpinned, which leaves a moderate dependency-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.