A PSR-11 dependency injection container with autowiring support
60%
Total Score
caution
Usable with caveats: release and commit activity stopped after the initial publication period.
The package has only two releases, both published about a year ago, with no releases in the past 12 months. This indicates limited ongoing maintenance despite the current stable version.
The repository recorded no commits and no active maintainers over the past three months. That is a meaningful maintenance and abandonment concern, although the package is still relatively young.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is partly offset by the repository's reported security-scanning tools.
All 11 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, dangerous triggers, or other reported findings, so this remains a hygiene concern rather than a severe risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.