The repository includes broad tests, release notes, a security policy, and a small runtime dependency surface. Workflow permission defaults and absent security-scanning tools leave modest hygiene concerns.
70%
Total Score
67
100
88
90
The package has 80 releases over roughly 6 years, but only one release appeared in the last 12 months, indicating a slower maintenance cadence.
There were zero commits and zero active maintainers during the last three months, a meaningful maintenance warning even though the repository is not archived.
Only one issue and two pull requests are open, but there were no new or merged pull requests in the last month, providing little evidence of active short-term collaboration.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest repository hygiene gap.
Two workflows lack top-level permission declarations and one requests top-level write access, which is weaker workflow hardening than explicit least-privilege settings.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.