It fits a mature, actively supported library with straightforward integration. Keep an eye on the concentrated contributor activity and minor workflow permission and pinning gaps.
90%
Total Score
100
100
100
100
All three workflows were analyzed with no audit findings, no untrusted checkout or script-injection paths, and only two of 19 action references unpinned. One workflow has top-level write permissions, a mild hygiene concern without an untrusted trigger.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1 || ^2.0.2 | — | — |
laminas/laminas-uri Version ^2.14 | — | — |
laminas/laminas-stdlib Version ^3.10.1 | — | — |
laminas/laminas-servicemanager Version ^3.14.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.