It has a clear BSD-3-Clause license, release notes, repository tests, and organization backing. The workflows show no detected dangerous findings, though both action references are unpinned.
68%
Total Score
75
93
100
The package has 21 releases over about six years with a median interval of about 55 days, but only one release in the last 12 months. This suggests slower maintenance without proving abandonment.
The repository recorded zero commits and zero active maintainers over the last three months. The recent release and pull-request merges provide some compensation, but this still raises maintenance concern.
Both analyzed workflows have all two action references unpinned, which weakens build reproducibility. No dangerous triggers, untrusted checkouts, script injection, or audit findings were detected, limiting the impact to caution.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^2.0 || ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
psr/container Version ^2.0 | — | — |
phpunit/phpunit Version ^10.5.63 | — | — |
psr/simple-cache Version ^2.0 || ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.