Two contributors split 14 recent commits evenly, and the package includes tests, a README, and a matching repository. Its very short history, unpinned workflow actions, and missing security policy leave less evidence for long-term support.
72%
Total Score
100
100
81
67
The package is only 2 days old, so its 9 releases show active initial development but provide almost no evidence of sustained maintenance.
Composer is used for builds, but no security scanning tool is present, leaving a modest gap in repository hygiene.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Version v0.1.8 is a non-stable 0.x release, which signals an immature API even though it is not marked as a prerelease.
The single workflow was fully analyzed, uses read-only permissions, and has no dangerous audit findings, but both of its 2 action references are unpinned.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
pestphp/pest Version ^4.0 || ^5.0 | — | — |
phpunit/phpunit Version ^12.0 || ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.