Clear documentation, tests, release notes, and security reporting support adoption. Recent work is concentrated in one contributor, and workflow dependencies are not pinned, leaving modest maintenance and build-integrity concerns.
78%
Total Score
67
100
100
All recent commits came from one contributor, creating concentration risk. Organization ownership provides some handoff capacity, but no second recent contributor is shown.
Only two commits were made in the last three months by one active maintainer, indicating limited recent maintenance despite the current release and recent repository push.
The sole workflow is fully analyzed, uses read-only permissions, and has no reported audit findings, but all 16 referenced actions are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
phpgt/curl Version ^3.2 | — | — |
phpgt/http Version ^1.3 | — | — |
phpgt/json Version ^2.2 | — | — |
phpgt/async Version ^1.0 | — | — |
phpgt/promise Version ^2.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.