Usable with caveats: this is a well-established, licensed package with repository tests, security scanning, and clear organizational backing. Its last registry release was in February 2022 and there were no commits in the latest three months, so verify that this legacy release still fits your PHP support needs.
72%
Total Score
88
100
94
90
The package has 59 releases over more than 11 years, but no registry release in the latest four years. This indicates a mature, stable legacy package but lowers confidence that new fixes are shipped promptly.
There were no commits and no active maintainers in the latest three months. The recent repository push provides some counterevidence, but the lack of current commit activity remains a maintenance concern.
Both workflows omit top-level token permissions declarations. No write permissions were observed, but explicitly limiting workflow tokens would provide stronger supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.