Recent work is spread across five contributors, and the project has release notes, a matching repository, and a license file. Workflow pinning and the lack of a security policy leave modest maintenance gaps.
72%
Total Score
100
100
86
67
The package has had no registry release in over five years and none in the last 12 months, which raises version freshness and maintenance concerns. Its four-release history and stable version reduce, but do not remove, that concern.
Composer build tooling is present, but no security scanning tooling was detected, leaving a modest process gap.
The repository has no security policy, which weakens vulnerability-reporting transparency, though this is a limited concern alongside active project backing.
The single workflow was fully analyzed with no audit findings or dangerous triggers, but two of four action references are unpinned, leaving avoidable build-reproducibility risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.