Clear documentation, repository tests, and security scanning support routine adoption. Pin CI actions and watch whether contributors broaden beyond the current single active contributor.
82%
Total Score
67
100
75
One contributor made 100% of the 8 commits in the last 3 months. Organization ownership provides some handoff capacity, but no second recently active contributor is shown.
The repository had 8 commits in the last 3 months, indicating recent activity, though all activity came from one maintainer. The activity is healthy but narrowly concentrated.
No repository security policy was found. This is a modest transparency gap, although the repository does use Psalm and the missing policy does not indicate abandonment.
Both workflows were analyzed cleanly with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, both action references are unpinned, leaving CI exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spiral/core Version ^3.17.2 | — | — |
spiral/logger Version ^3.17.2 | — | — |
spiral/tokenizer Version ^3.17.2 | — | — |
symfony/translation Version ^6.4.30 || ^7.4 || ^8.0 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.