Tests, a usable README, an MIT license, and minimal runtime dependencies support practical adoption. The workflow has no audit findings, but its six action references are unpinned and the project lacks a security policy.
57%
Total Score
50
100
81
75
The repository is owned by an individual rather than an organization, so the single registry maintainer does not show organizational support; combined with the inactive repository, this provides little maintenance capacity evidence.
The latest release was in January 2022, with no releases in the last 12 months; this long publishing gap is a meaningful abandonment concern despite six prior releases.
There were zero commits and zero active maintainers in the last three months, consistent with the repository having been inactive since January 2022 and materially increasing abandonment risk.
Composer is used for the build, but no security scanning tooling is present; this is a modest transparency and maintenance gap for an otherwise small package.
The repository is not archived, although its last push was in January 2022, so the non-archived state only partly offsets the age concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.