Clear documentation, repository tests, release notes, and security tooling make the package straightforward to evaluate and maintain. The small contributor base and unpinned workflow actions warrant periodic review.
78%
Total Score
100
100
88
83
Only two releases exist over roughly two years and four months, with one release in the last 12 months; this is a slow cadence but not abandonment because the repository was recently active.
Version 0.2.0 is not a stable-major release, which signals a less mature compatibility commitment, although it is not a prerelease.
Both workflows were fully analyzed with no audit findings or untrusted-code sinks. However, all 34 action references are unpinned and one release workflow grants top-level write permissions, creating a moderate workflow-hygiene concern without evidence of an active exploit path.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0.0 | — | — |
symfony/clock Version ^6.4.0 || ^7.0.0 || ^8.0.0 | — | — |
phpunit/phpunit Version ^11.0.0 || ^12.0.0 || ^13.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.