Tests in the source repository and an organization-backed, matching repository improve confidence. No security policy and broad workflow write permissions leave modest transparency and CI-hygiene gaps.
68%
Total Score
100
79
67
This is the package's first release, published 0 days ago, so there is no release history to demonstrate sustained maintenance or stability.
Composer is used as the build tool, but no security scanning tool is present, leaving a modest repository hygiene gap.
The repository has no security policy, so vulnerability-reporting and response expectations are not documented.
Version v0.1.0 is an early major version, which signals a less mature compatibility and maintenance track record even though it is not marked prerelease.
The single workflow has top-level write permissions, which is broader than necessary, but the audit found no untrusted checkout, script injection, or other audit findings.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
amphp/amp Version ^3.1 | — | — |
amphp/redis Version ^2.0.4 | — | — |
revolt/event-loop Version ^1.0.9 | — | — |
stewart-php/store Version self.version | — | — |
stewart-php/support Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.