Google Slides for PHP — the service descriptor, its faker, its webhook verification, one class per operation, and a fancy-flow-php executor per node. Plain HTTP on particle-academy/fancy-connector-core; no vendor SDK.
76%
Total Score
healthy
Healthy release: active maintenance and strong package documentation outweigh pre-1.0 maturity and unpinned workflow actions.
One contributor made about 87% of recent commits, creating concentration risk. The second contributor remains active and the repository is organization-owned, which provides some handoff capacity.
The repository has no security policy. This is a transparency and incident-reporting gap, though it is not evidence of unsafe code by itself.
Version v0.4.0 is not a stable major release, so compatibility changes remain more likely than for a mature 1.0+ package. It is not marked as a prerelease, which partly offsets that concern.
All 25 analyzed action references are unpinned, which weakens build reproducibility. The workflows use read-only permissions and have no untrusted checkouts or script injections; the low-confidence cache finding and high-confidence ad-hoc install are hygiene concerns rather than standalone severe risks.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
particle-academy/fancy-connector-core Version >=0.4.0 <2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.