Clear licensing, repository tests, release notes, and security scanning support adoption. Recent registry releases and pull requests help, but the absence of commits in three months and unpinned workflow actions warrant attention.
72%
Total Score
88
100
100
100
The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful maintenance warning, although recent releases and pull-request activity provide partial counterevidence.
All three workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection; the pull_request_target trigger has no reported sink. However, all seven action references are unpinned, which leaves workflow dependencies exposed to upstream changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^2.0 || ^3.0 | — | — |
myclabs/php-enum Version ^1.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.