Repository tests, Psalm checks, documentation, and a matching source repository provide useful consumer and provenance signals. Organization backing and the absence of deprecation or install-time scripts reduce adoption friction, but the package has a fairly broad runtime dependency surface.
62%
Total Score
75
93
75
The package has existed since September 2021 with 7 releases and 1 release in the last 12 months. This shows ongoing publication, though the modest release cadence limits evidence of active maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, indicating no observed recent development activity. The release history shows a release within the last 12 months, which partly offsets but does not remove the maintenance concern.
Both workflows were analyzed successfully and contain no reported audit findings or dangerous triggers, but all 6 referenced actions are unpinned. That leaves build inputs less reproducible and increases exposure to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^2|^3 | — | — |
nikic/fast-route Version ^1 | — | — |
paragonie/easydb Version ^3 | — | — |
psr/http-message Version ^1 | — | — |
paragonie/ionizer Version ^2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.