It has a clear MIT license, tests, release notes, and organization backing. The workflow uses two unpinned actions, and the repository has no security policy or scanning.
67%
Total Score
75
80
50
The package has 30 releases since August 2020, but its latest registry release was in December 2024 and it made no releases in the last 12 months. This weakens confidence in ongoing release maintenance.
No commits or active maintainers were recorded in the last 3 months. Although the repository was pushed recently, the measured recent activity is currently absent.
The repository uses Composer for builds, but no security scanning tools were detected. That is a modest transparency and maintenance weakness for a published dependency.
The repository has no security policy. This does not show a vulnerability, but it leaves the process for reporting and handling dependency issues undocumented.
The sole workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That leaves avoidable build reproducibility and action-change risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
symplify/easy-coding-standard Version ^11.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.