Tests, licensing, and organization backing provide useful maturity and transparency. The workflow uses 9 unpinned actions, and the absence of a security policy leaves a modest maintenance and supply-chain hygiene gap.
62%
Total Score
75
100
94
50
The package has 44 releases since February 2019, but none in the 19 months since February 2025. That long pause lowers confidence in active maintenance despite the substantial release history.
The repository recorded zero commits and zero active maintainers during the last three months. Combined with the stale release history, this is a meaningful maintenance concern.
The repository has no security policy. That is a transparency gap for reporting and handling vulnerabilities, though it is not severe enough to make the release unfit by itself.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all 9 action references are unpinned. This leaves avoidable workflow supply-chain exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
amphp/amp Version v2.6.* | — | — |
symfony/uid Version ^6.3 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.