The MIT license, matching repository, and release notes improve transparency. The missing security policy and nine unpinned workflow actions add maintenance and build-integrity concerns.
42%
Total Score
50
100
72
75
This is the only release, published about 3 years and 9 months ago, with no releases in the last 12 months. That substantially increases abandonment risk.
The repository recorded zero commits and zero active maintainers in the last 3 months, consistent with a project that has not been maintained since its initial release.
There were no new or closed issues or pull requests in the last month. With no recent commits and only one release, this supports a conclusion of inactivity rather than healthy stability.
The repository has 1 star, 0 forks, and 1 watcher. Low popularity is only supporting evidence, but it offers little external adoption signal to offset the inactivity.
Composer is used for builds, but no security-scanning tools are configured. The absence of scanning is a transparency and maintenance gap, though it is not severe on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nesbot/carbon Version ^2.63 | — | — |
spiral/framework Version ^3.5 | — | — |
spiral/roadrunner-bridge Version ^2.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.