Recent repository work, release notes, tests, and automated dependency and security tooling support continued maintenance. The organization owns the project, but all recent commits come from one contributor and workflow actions are not pinned; the missing security policy is a smaller transparency gap.
78%
Total Score
90
100
100
75
One contributor made all 17 recent commits, so maintenance is concentrated; organization backing provides some handoff capacity but no second active contributor is shown.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The workflow is fully analyzed, uses read-only permissions, and has no untrusted checkout or injection findings. However, all three referenced actions are unpinned, so their versions can change without a reviewed package release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
php-sap/common Version ^6.2.0 | — | — |
php-sap/interfaces Version ^5.1.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.