The package is small and focused, with a clear README, repository tests, and a matching source tree. Its workflow has no dangerous triggers, but all three action references are unpinned.
42%
Total Score
0
75
83
The package has had no releases in about 4 years and 9 months, despite 13 releases overall. This long release silence is strong evidence of abandonment risk.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, reinforcing the release-history concern rather than showing ongoing maintenance.
The repository has 0 stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no evidence of a broader community safety net.
Composer build tooling is present, but no security-scanning tools were detected. This is a maintenance and transparency gap, though it is less significant than the inactivity.
The single workflow was fully analyzed and has no dangerous triggers or audit findings, but all 3 action references are unpinned, leaving dependency versions exposed to change.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/dbal Version ^2.4 || ^3.1.5 | — | — |
league/tactician Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.