Checks that the installed RoadRunner binary matches the version required by the project's Composer packages
78%
Total Score
healthy
A stable release has strong project backing, tests, and security tooling, but its release history is only one day old.
This package has only one recorded release and is less than one day old, so there is no demonstrated long-term release history or cadence yet.
No commits or active maintainers were recorded in the last 3 months, which weakens evidence of sustained maintenance. The recent release and 15 merged pull requests provide some compensation, but not a full maintenance history.
All six workflows were analyzed successfully with no audit findings or untrusted checkout and script-injection sinks. However, all 10 analyzed action references are unpinned, and one workflow grants top-level write permissions, creating moderate workflow hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
composer/semver Version ^3.3 | — | — |
symfony/process Version ^5.4 || ^6.0 || ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.