The complete README, test suite, MIT license, and organization-backed repository provide a solid starting point. GitHub Actions use unpinned actions, and the project has no security scanning or published security policy yet.
68%
Total Score
100
100
83
75
The package was first released today and has only one release, so there is no demonstrated release track record or maintenance history yet.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but the package is brand new, so the lack of audience is not by itself a serious concern.
Composer build tooling is present, but no security scanning tools were detected, leaving security-process coverage limited.
The repository has no security policy, so there is no documented channel or process for reporting vulnerabilities.
Both workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings, and one workflow uses read-only permissions. However, all four referenced actions are unpinned, reducing build reproducibility and integrity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.