Clear documentation, licensing, and repository tests make integration straightforward. The small dependency surface and organization backing help, but recent commit activity is quiet and CI has a medium-confidence bot-condition warning.
68%
Total Score
88
100
94
75
The package has existed since May 2020 and has eight releases, but only one release in the last 12 months and a median interval of about 323 days indicate a slow cadence.
The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful maintenance concern, although the recent release and merged pull requests provide limited compensating evidence.
No repository security policy was found, leaving disclosure guidance and security ownership less transparent for a package that handles personal-identification data types.
The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection findings. However, all 8 action references are unpinned and the auditor reported a medium-confidence high-severity bot-conditions finding, so CI hygiene needs attention.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^3.4@dev || ^4.0@dev | — | — |
nepada/birth-number Version ^1.0@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.