The repository includes tests, a changelog, a security policy, and 12 commits in the last three months. The young release history, single active contributor, and unpinned workflow actions leave meaningful maintenance and build-integrity caveats.
68%
Total Score
88
100
83
100
Only two releases exist across 188 days, with a median interval of about 156 days; this is limited evidence of release maturity for a young package.
All 12 recent commits came from one contributor, creating a concentrated maintenance dependency; organization backing partly compensates but does not remove the continuity risk.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, so this modestly limits external maturity evidence rather than determining the verdict.
Composer build tooling is present, but no security-scanning tools were detected, leaving a transparency and maintenance-hygiene gap.
Both workflows were analyzed without failed files or dangerous sinks, but all 9 action references are unpinned and one workflow grants top-level write permissions. These are build-integrity and permission-hygiene cautions, not severe risks on their own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.