The project has solid release history, a stable version, organization backing, tests in the repository, and active security tooling. Recent commit activity is absent, all 24 workflow actions are unpinned, and no security policy is published, leaving meaningful maintenance and workflow-hygiene concerns.
68%
Total Score
75
100
100
75
There were zero commits and zero active maintainers in the last three months. This is a meaningful recent maintenance gap, although the release history and July push provide some compensating evidence.
The repository has three open issues and one open pull request, but no new or closed issues or pull requests in the last month, indicating limited recent collaboration.
The repository has no published security policy, reducing transparency about how vulnerabilities should be reported and handled.
All three workflows were analyzed without high-confidence audit findings or untrusted-trigger sinks, and one workflow scopes write access. However, all 24 action references are unpinned, which weakens workflow reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/http-client Version ~7.4 | — | — |
simplesamlphp/assert Version ^2.0 | — | — |
symfony/var-exporter Version ~7.4 | — | — |
symfony/http-foundation Version ~7.4 | — | — |
simplesamlphp/xml-common Version ~2.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.