Dont' operation inside constructor
55%
Total Score
50
80
50
This package has only one release, published about 3 years and 6 months ago, with no releases in the last 12 months. That leaves maintenance and compatibility uncertain.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long gap since its only release. This is a meaningful abandonment concern.
Version 0.1.0 is an early release rather than a stable major version, and the README describes the plugin as experimental. Consumers should expect a less mature interface.
Both analyzed workflows use unpinned actions (2 of 2 references), which weakens build reproducibility and supply-chain hygiene. The audit found no dangerous triggers, sinks, or higher-severity findings, which limits the impact.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vimeo/psalm Version ^5 | — | — |
nikic/php-parser Version ^4.10 | — | — |
struggle-for-php/resource-operations Version ^4.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.