RBAC authorization package for Mezzio framework with optional attribute-based support
79%
Total Score
healthy
Healthy: recent releases and a maintained, tested repository outweigh limited adoption and workflow pinning gaps.
The repository has zero stars and forks and one watcher. For a package only 135 days old this is weak supporting evidence, but popularity alone does not outweigh its release and repository activity.
No security policy was found in the repository. That is a modest disclosure gap for a package handling authorization, although the available build security tooling partly offsets it.
The single workflow was fully analyzed, uses read-only permissions, and has no detected dangerous triggers, untrusted checkouts, injections, or audit findings. However, all 7 action references are unpinned, leaving a supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 || ^2.0 | — | — |
psr/http-message Version ^1.1 || ^2.0 | — | — |
mezzio/mezzio-router Version ^3.15 || ^4.1 | — | — |
psr/http-server-handler Version ^1.0 | — | — |
sirix/container-resolver Version ^0.2 || ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.