Google Docs for PHP — the service descriptor, its faker, its webhook verification, one class per operation, and a fancy-flow-php executor per node. Plain HTTP on particle-academy/fancy-connector-core; no vendor SDK.
72%
Total Score
caution
Usable with caveats: active maintenance is offset by unpinned workflow actions and incomplete security hygiene.
One contributor made about 81% of recent commits, creating concentration risk. A second contributor remains active and the repository is organization-owned, which partly compensates for that concentration.
No security policy was found in the repository, leaving vulnerability reporting and response expectations unclear.
v0.4.0 is not a stable major release, so the API may still change. It is not marked as a prerelease, which partly offsets the maturity concern.
All 25 analyzed action references are unpinned, and a high-confidence audit found ad hoc package installation; both weaken build reproducibility. The cache-poisoning finding is low confidence and the workflows use read-only permissions, which limits the overall impact.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
particle-academy/fancy-connector-core Version >=0.4.0 <2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.