The package has a small dependency surface, tests, a README, and Psalm-based checking. Its recent release is reassuring, but the repository shows no commits in the last three months and its six workflow actions are unpinned.
72%
Total Score
75
100
89
83
The project has existed since April 2021, with 10 releases and a latest release in February 2026; however, only one release arrived in the last 12 months, indicating a slower cadence.
There were no commits and no active maintainers in the last three months. The recent release partly offsets this, but the lack of current development activity is a maintenance concern.
The repository has 5 stars and no forks, so there is little external adoption evidence; this is supporting context rather than a health verdict.
The repository has no security policy. This is a transparency gap, although the small library and available Psalm tooling provide some compensation.
The single workflow was fully analyzed with no trigger sinks or audit findings, but all 6 action references are unpinned, leaving build inputs less reproducible.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.