The package includes a substantial artifact with seven runtime dependencies and no install-time scripts. Its organization backing, repository linkage, security policy, and clean issue queue add useful support context.
78%
Total Score
67
100
100
83
One contributor made 100% of the 56 recent commits, creating concentration risk; organization ownership provides some backing but does not remove the lack of observed contributor redundancy.
The repository recorded 56 commits in the last three months, showing strong activity, although all observed commits came from one active maintainer.
All seven workflows were analyzed, all 13 action references are pinned, and no untrusted checkouts or script injections were found. Two high-confidence template-injection findings in release-please.yml and two workflows with top-level write permissions are meaningful workflow-hygiene concerns.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ratchet/pawl Version ^0.4 | — | — |
psr/http-client Version ^1 | — | — |
psr/http-message Version ^1|^2 | — | — |
php-http/discovery Version ^1 | — | — |
psr/http-client-implementation Version ^1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.