The repository includes tests, a changelog, a license, and a security policy. Maintenance remains unproven after the initial release, and all nine workflow actions are unpinned.
64%
Total Score
50
92
75
This package is 97 days old and has only one release, so there is not yet enough history to demonstrate sustained maintenance. Its recent initial release partly limits the concern, but the cadence is still unproven.
The repository has recorded zero commits and zero active maintainers in the last three months. Because the project is only 97 days old and has one release, this is a meaningful maintenance concern but not evidence of long-term abandonment.
All three workflows were analyzed successfully with no injection or high-severity findings, but all 9 of 9 action references are unpinned and one workflow grants top-level write access. That is a workflow hygiene and supply-chain reproducibility concern, though no untrusted trigger or sink raises it to danger.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.