Clear licensing, a useful README, repository tests, and an exact release note improve transparency. The small project footprint, absent security policy, three months without commits, and 14 unpinned workflow actions reduce confidence in ongoing maintenance and build hygiene.
68%
Total Score
75
94
83
There were zero commits and zero active maintainers during the last three months. This is a meaningful maintenance concern, despite the recent v2.0.0 release.
Composer build tooling is present, but no security scanning tools are reported, leaving a modest assurance gap for a maintained dependency.
The repository has no security policy, so users are given no documented process for reporting or handling vulnerabilities.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all 14 action references are unpinned, weakening build reproducibility and update integrity.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^3.23 | — | — |
symfony/yaml Version ^8.0 | — | — |
symfony/asset Version ^8.0 | — | — |
symfony/finder Version ^8.0 | — | — |
symfony/console Version ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.