The package is small and focused, with a clear source tree and ordinary Composer dependencies. Licensing, tests, and security scanning support adoption, but workflow references are not pinned and maintenance appears quiet.
62%
Total Score
75
92
100
The package has four releases since January 2023, but none in the last 12 months; the latest release was published in January 2025. This indicates limited recent release activity rather than clear abandonment.
The repository recorded no commits and had no active maintainers in the last three months, reinforcing the long release gap. The repository is still present and backed by an organization, which keeps this from being a severe abandonment signal.
All 25 analyzed action references are unpinned, so workflow dependencies can change without a package release. Two workflows also grant top-level write permissions, but there were no detected untrusted checkouts, script injection paths, or audit findings.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/neon Version ^3.3.3 | — | — |
orisai/utils Version ^1.0.0 | — | — |
orisai/exceptions Version ^1.0.0 | — | — |
orisai/data-sources Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.