The project is licensed, documented, tested, and has a recent release with release notes. The repository shows no commits in three months, while both workflow actions are unpinned and no security policy is present.
69%
Total Score
50
93
50
The repository recorded zero commits and zero active maintainers in the last three months. This conflicts with the recent release and latest push, but still lowers confidence in ongoing development between releases.
Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap rather than evidence that the package is unsafe.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
The single workflow was fully analyzed, uses read-only permissions, and has no dangerous triggers or audit findings. However, both of its action references are unpinned, leaving the build exposed to upstream action changes.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ~1.0||~2.0||~3.0 | — | — |
twig/twig Version ^3.4.3 | — | — |
symfony/form Version ~5.4|~6.4|~7.4|~8.0 | — | — |
symfony/yaml Version ~5.4|~6.4|~7.4|~8.0 | — | — |
symfony/cache Version ~5.4|~6.4|~7.4|~8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.