Documentation, tests in the repository, licensing, and read-only pinned workflows provide good transparency. The one-person maintenance base and lack of a security policy leave moderate continuity risk.
72%
Total Score
67
100
100
50
The repository is owned by a user account rather than an organization, so there is no organizational handoff capacity to offset the concentrated recent contribution pattern.
One contributor made all 17 recent commits, giving the project a single-person bus factor. The active work is reassuring, but loss of that maintainer would materially threaten continuity.
No repository security policy was found. That reduces transparency around vulnerability reporting and response, although the repository does use Psalm and audited workflows.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rasuvaeff/yii3-outbox Version ^1.7 | — | — |
rasuvaeff/yii3-webhooks Version ^1.0 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.