A clear README, MIT licensing, and a security policy make the package easy to evaluate. Its small footprint and clean workflow audit help, but pin v1.0.0 until maintenance resumes.
63%
Total Score
50
88
83
This is the package's only release, published about 165 days ago, so there is little release history to demonstrate sustained maintenance.
The repository recorded zero commits and zero active maintainers during the last three months, which is a meaningful maintenance concern for a package with only one release.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest transparency and hygiene gap.
The single workflow was fully analyzed with no injection or high-severity findings, but both of its two action references are unpinned, leaving avoidable dependency-update risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.