The package is licensed, tested, and has a focused dependency set. Its small community and unpinned workflow references leave less margin for maintenance and build hygiene.
68%
Total Score
75
100
94
50
The repository recorded 0 commits and 0 active maintainers in the last three months, although the package still had a release within the past year; this points to slowing maintenance rather than abandonment.
The repository has 1 star, 0 forks, and 1 watcher, providing little independent evidence of broad review or community support; this is a supporting concern, not a verdict.
No security policy was found, which reduces transparency for reporting vulnerabilities, though the repository does use Psalm for security-oriented analysis.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its 2 action references are unpinned, leaving build inputs less reproducible.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.