A documented security policy and repository tests support transparency, while all three workflow action references are unpinned. The package is licensed, non-deprecated, and backed by an organization-owned repository.
55%
Total Score
50
93
100
The package has had only two releases, both on the same day, with no release in nearly 2 years and 8 months. This is strong evidence of limited ongoing maintenance for a dependency.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the long release gap and increasing abandonment risk.
The workflow is fully analyzed, uses read-only permissions, and has no dangerous sinks or audit findings, but all three action references are unpinned, leaving avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version ~3.20 | — | — |
phpfastcache/phpfastcache Version ^9.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.