Clear documentation, tests, and a permissive license support adoption. The workflow uses read-only permissions, but its action references are unpinned; pin this version and watch future maintenance.
68%
Total Score
75
88
50
Seven releases in 45 days show active early development, but the project is still very young, so long-term maintenance is not yet established.
All 23 recent commits came from one contributor, leaving maintenance and continuity dependent on a single person.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users are given no documented channel or process for reporting vulnerabilities.
The sole workflow was fully analyzed, has read-only permissions, and has no detected audit findings, but both action references are unpinned, weakening build reproducibility.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.