PHP library that expands a regular expression into a random string that matches this pattern
48%
Total Score
unhealthy
No release since January 2022 and no recent commits point to an effectively dormant project.
The package has made only one release, on January 9, 2022, with none in the last 12 months. This is strong evidence of abandonment risk for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and indicating no current maintenance capacity.
No security policy is present in the repository. This is a transparency gap, but it is secondary to the stronger maintenance concerns.
The assessed version is the sole v0.0.1 release and is not a stable major version. The small, focused package may reduce compatibility risk, but maturity remains limited.
All 8 analyzed action references are unpinned, and high-confidence findings identify spoofable bot conditions and an unpinned container image. The pull_request_target workflow has no untrusted checkout or script-injection finding, limiting the risk to workflow hygiene and release integrity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.