A substantial README, release notes, and changelog make integration clearer. No install hooks or runtime dependencies reduce adoption friction; pin this version while ownership remains concentrated.
78%
Total Score
83
100
94
67
All 22 recent commits came from one contributor, creating a meaningful continuity risk; organization backing partly compensates because maintenance can potentially be handed off.
Composer is used for builds, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, reducing the clarity of the process for reporting and handling vulnerabilities.
The only workflow was fully analyzed with no detected injection sinks or audit findings, but both action references are unpinned, so they are less reproducible and harder to trust over time.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.