The repository includes tests, release notes, a clear README, a license, and a security policy. Composer auditing and read-only workflow permissions help, but every action reference is unpinned; pinning them would improve release assurance.
68%
Total Score
83
86
83
This is the package's first release, published within the last day, so there is no established release track or maintenance history yet.
All seven recent commits come from one contributor. Organization backing provides some handoff capacity, but no second active contributor is shown.
The assessed version is 1.0.0-beta1 and all recent releases are prereleases, indicating the API and implementation may still change.
The workflow is fully analyzed, uses read-only permissions, and has no reported high-confidence findings, but all 11 action references are unpinned, leaving avoidable update and supply-chain risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0 || ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
drupal/core Version ^10.3 || ^11 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.