The MIT license, README, tests, and exact-version release notes make it easy to evaluate and integrate. Organization backing and a non-archived repository help, though the small project footprint limits supporting evidence.
70%
Total Score
75
100
86
75
There were no commits and no active maintainers in the last three months, which weakens evidence of ongoing maintenance even though release activity remains strong.
The repository uses Composer and Make, but no security-scanning tool was detected; this is a modest transparency and maintenance gap for a dependency project.
No security policy was found. This is a modest disclosure-process gap, partially offset by the package's small scope and otherwise documented repository.
Version 0.3.3 is not a prerelease and recent releases contain no prerelease versions, though the 0.x major version indicates API stability may still evolve.
The sole workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but all four action references are unpinned, leaving avoidable build-integrity risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.