PSR-16 cache on top of the RoadRunner Key-Value plugin storages (memory, boltdb, redis, memcached) over RPC
70%
Total Score
caution
This first-day release has no observed commit history, while all workflow actions are unpinned; strong project hygiene partly offsets the uncertainty.
The package is 0 days old with only 1 release, so there is no demonstrated release continuity or maintenance track record yet.
There were 0 commits and 0 active maintainers in the last 3 months. Because the repository and package were created on the same day and 12 pull requests were merged recently, this is mainly a lack of historical evidence rather than proof of abandonment.
All 10 analyzed action references are unpinned, which weakens build reproducibility. The audit found no untrusted checkouts, script injection, or high-confidence security findings; one workflow has top-level write permissions, but no untrusted trigger reaches it.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/simple-cache Version 2 - 3 | — | — |
spiral/roadrunner Version ^3.0 | — | — |
roadrunner/api-dto Version ^2.1 | — | — |
roadrunner/goridge Version ^4.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.