Implementation of the setono/client-id-contracts
58%
Total Score
caution
No releases or commits since June 2023, with all 18 workflow actions unpinned.
The package has had no registry releases in more than three years, with none in the last 12 months and only four releases overall. This is a meaningful maintenance concern, though the package may be stable.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
The repository has only 2 stars, 1 fork, and 1 watcher, indicating a very small user and contributor community. Popularity is supporting evidence, so this raises confidence concerns without deciding the verdict alone.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear. This is a transparency gap, not evidence of malicious behavior.
The sole workflow was fully analyzed without dangerous triggers or audit findings, but all 18 action references are unpinned. That weakens build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/uid Version ^5.4 || ^6.0 | — | — |
setono/client-id-contracts Version ^0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.