The repository includes tests, a clear README, matching source, and read-only workflow permissions. Its one-release history leaves long-term maintenance unproven; pin v1.0.0 until sustained activity is visible.
66%
Total Score
75
100
88
100
The package was first and last released today, with only one release, so there is not yet evidence of sustained maintenance or release reliability.
No commits or active maintainers were recorded during the last three months, but this is partly explained by the package having been released today; ongoing maintenance remains unproven.
The repository uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency gap rather than evidence of unsafe code.
The workflow audit completed cleanly, uses read-only permissions, and found no injection or high-severity issues. Both analyzed action references are unpinned, leaving a supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.