Tests, documentation, licensing, and a minimal dependency set support adoption. The young project has had no commits in three months, lacks a security policy, and uses unpinned workflow actions.
64%
Total Score
75
100
88
83
The package is only 105 days old and has two releases, both published within roughly 35 minutes, so there is little evidence of an established release pattern.
The repository recorded zero commits and zero active maintainers over the last three months, which is the strongest evidence that maintenance capacity is currently unproven.
Composer build tooling is present, but no security-scanning tooling was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, reducing guidance for reporting and handling vulnerabilities in an SDK that processes API credentials.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both action references are unpinned, leaving updates vulnerable to moving upstream code.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.