It has an MIT license, a useful README, tests, and organization-backed source. Workflow images are unpinned and the repository has no security policy; pin this version if its older dependencies fit.
58%
Total Score
75
83
50
The package has 30 releases since 2019, but none in the last 12 months; its latest release was about two years and five months ago, indicating slowed maintenance.
The repository recorded no commits and no active maintainers in the last three months, reinforcing the long release gap and increasing abandonment risk.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these figures provide little external evidence of active adoption.
The linked repository has no security policy, leaving vulnerability reporting and response practices undocumented.
All 7 analyzed action references are unpinned, and a high-confidence high-severity unpinned container image was found in the test workflow; the audit itself completed fully with no untrusted checkout or injection findings.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
amethyst/core Version 0.3.* | — | — |
amethyst/owner Version 0.3.* | — | — |
railken/template Version ^1.1 | — | — |
nicoswd/php-rule-parser Version ^0.7.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.