It has a matching repository, MIT licensing, tests, and a small dependency surface. Workflow references are unpinned and the repository has no security policy, so maintenance and build hygiene deserve attention.
68%
Total Score
100
88
50
The package has 32 releases over more than 11 years, but none in the last 12 months; the latest release was in December 2024. This indicates a meaningful maintenance slowdown, though the long release history shows maturity.
The repository uses Composer and Make for builds, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than a severe risk.
No security policy was found in the repository, leaving vulnerability reporting and response expectations undocumented.
All three workflows were analyzed with no detected injection or high-severity findings, but all five action references are unpinned. That weakens build reproducibility and update control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^2.0||^3.0 | — | — |
psr/simple-cache Version ^2.0||^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.