kiwilan/php-audio
The package has a clear README, tests, changelog, MIT licensing, and a matching organization-backed repository. Its stable version and modest dependency set help, but the small release history leaves less evidence of sustained maintenance.
64%
Total Score
75
100
94
50
Health Score Breakdown
The package has 19 releases since June 2023, but only 1 release in the last 12 months. This shows an established project with recently reduced release activity.
The repository recorded 0 commits and 0 active maintainers in the last three months. A push in June 2026 and a release in November 2025 provide some counterevidence, so this lowers confidence in ongoing maintenance without indicating abandonment alone.
No repository security policy was found. This is a transparency gap, but it is not severe enough to outweigh the repository's tests, tooling, and other project evidence.
All 15 analyzed action references are unpinned, and a high-confidence bot-conditions finding indicates that actor context may be spoofable in the Dependabot auto-merge workflow. The workflow has a pull_request_target trigger but no untrusted checkout or script-injection sink was found, limiting the impact to caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Ewilan Rivière |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 james-heinrich/getid3 Version v1.9.22 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.