The repository has substantial tests, documentation, release notes, and automated dependency and audit tooling. Recent commit activity is absent, while the workflows use 15 unpinned actions and contain a high-confidence bot-condition finding.
56%
Total Score
83
100
83
50
The package is 408 days old with four releases and a latest release on April 1, 2026, but only one release appeared in the last 12 months, indicating a modest release cadence.
There were zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have slowed despite the recent repository push timestamp.
The repository has three stars, zero forks, and one watcher, showing limited adoption evidence; popularity is supporting evidence only and does not by itself make a small package unhealthy.
The repository has no security policy, leaving the process for reporting and handling vulnerabilities undocumented.
Version 0.1.1 is not a stable major release, so its public API may still change and the package has limited maturity evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vlucas/phpdotenv Version ^5.6 | — | — |
guzzlehttp/guzzle Version ^7.9 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.