Usable with caveats: this is a mature, licensed package with a real organization-backed repository, tests, and a recent release. However, the repository shows no commits or active maintainers in the last three months, and its workflow permissions are not consistently restricted.
68%
Total Score
67
100
94
83
The repository recorded zero commits and zero active maintainers during the last three months. Despite the recent release and long history, this is a concrete maintenance-capacity concern.
There are 23 open issues and three open pull requests, but no new or closed issues or pull requests in the last month. This indicates limited current project activity.
The repository uses Make and Composer for builds, but no security scanning tools were detected. That is a transparency and assurance gap, though it is not by itself evidence of an unsafe release.
Two workflows omit top-level token permissions and one workflow declares write permissions. Although no dangerous workflow pattern was detected, the permissions are less restrictive than ideal and increase automation exposure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.1 || ^2.0 | — | — |
laminas/laminas-filter Version ^2.19 | — | — |
laminas/laminas-stdlib Version ^3.19 | — | — |
laminas/laminas-validator Version ^2.60.0 | — | — |
laminas/laminas-servicemanager Version ^3.21.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.