66%
Total Score
caution
A nearly three-year release interval and no commits in the last three months make maintenance less reassuring.
The package has four releases over more than 10 years, with a median interval of nearly three years; only one release appeared in the last 12 months. This indicates slow maintenance for a package consumers may still need to track.
There were zero commits and zero active maintainers in the last three months. The recent release provides some compensating evidence, but the current lack of development activity still raises maintenance risk.
The repository uses Composer build tooling, but no security-scanning tool was detected. This is a modest transparency gap rather than a severe concern for this small adapter.
The single workflow was fully analyzed with no injection or high-severity findings, but its one action reference is unpinned. The missing top-level permissions block is acceptable here because the workflow does not grant top-level write access.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
predis/predis Version ~2.2 | — | — |
thelia/installer Version ~1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.