Documentation and project structure support straightforward integration. Maintenance has gone quiet since February, and every workflow action is unpinned; pinning this version is preferable to tracking future releases.
62%
Total Score
50
90
67
The package had 11 releases in the last 12 months, showing strong early activity, but the latest release was about seven months ago and the cadence has since stopped.
The repository recorded 0 commits and 0 active maintainers over the last three months, indicating a meaningful maintenance gap despite the recent release history.
The repository has no documented security policy, which limits vulnerability-reporting transparency. Sonar scanning provides some compensating security practice but does not replace a response policy.
All 8 analyzed action references are unpinned, leaving build automation exposed to unreviewed upstream changes. No dangerous triggers, untrusted checkouts, script injections, or audit findings were reported.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
doctrine/orm Version ^2.0|^3.0 | — | — |
sebastian/diff Version ^5.0|^6.0|^7.0|^8.0 | — | — |
symfony/config Version ^6.0|^7.0|^8.0 | — | — |
roslov/migration-checker Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.