The artifact is small and focused, with tests in the source tree and no install-time scripts. Read-only workflows and pinned actions reduce build exposure, while organization backing provides continuity despite concentrated recent contribution.
80%
Total Score
83
100
100
All 5 recent commits came from one contributor, creating a real continuity risk; the organization-owned repository provides some compensation because maintenance can be handed off.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
phpstan/phpstan Version ^2.2.7 | — | — |
nunomaduro/pokio Version ^1.0.1 | — | — |
pestphp/pest-plugin Version ^5.0.0 | — | — |
tomasvotruba/type-coverage Version ^2.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.