It has a clear license, repository tests, recent release notes, and no install-time scripts. One contributor handled all recent commits, while every CI action is unpinned and the audit found a medium-confidence bot-condition issue.
68%
Total Score
67
93
100
The package has existed for over eight years with 17 releases, but only one release in the last 12 months indicates a modest maintenance pace.
All recent commit activity comes from one contributor. Organization backing provides some handoff capacity, but the observed recent activity remains concentrated.
There was one commit in the last three months, so maintenance is present but currently sparse.
The single workflow was fully analyzed and uses read-only permissions, with no untrusted checkout or script-injection path. However, all 8 action references are unpinned, and a medium-confidence high-severity bot-condition finding remains a CI hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/forms Version ^3.1@dev | — | — |
nette/utils Version ^3.2@dev || ^4.0@dev | — | — |
nepada/email-address Version ^2.3@dev || ^3.0@dev | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.