The repository has tests, pinned workflow actions, security scanning, and release notes for v1.1.1. Recent work is concentrated in one contributor, so maintenance depth is limited, though organization backing reduces handoff risk.
78%
Total Score
67
100
83
One contributor made all commits in the last three months, creating concentrated maintenance capacity. Organization ownership partly mitigates the handoff risk, but the observed contributor base remains thin.
Only one commit was recorded in the last three months, showing limited recent development activity. This is a caution, although the recent release and organization backing provide some compensation.
No security policy is present in the repository, leaving vulnerability-reporting expectations unclear. This is a transparency gap, but it is not severe enough to outweigh the other maintenance evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
temporal/sdk Version ^2.17 | — | — |
open-telemetry/sdk Version ^1.4 | — | — |
symfony/polyfill-php83 Version ^1.32 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.