Regular releases, comprehensive tests and documentation, and two active contributors support continued maintenance. The missing security policy and unpinned workflow actions leave preventable hygiene risks.
72%
Total Score
100
100
89
50
The repository has zero stars and one fork, offering little adoption evidence, although popularity is only supporting evidence and does not outweigh the observed maintenance.
The repository has no SECURITY policy, reducing transparency around vulnerability reporting for a reusable application library.
Version 0.0.14 is not a prerelease, but the 0.x major version signals an API that may still change and reduces maturity confidence.
All three workflows were analyzed, but all six action references are unpinned, and the release workflow has a high-confidence script-injection finding plus high-confidence template-injection findings; the absence of an untrusted trigger limits the severity, but this remains a meaningful release-hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
predis/predis Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.