The package includes tests, a clear README, MIT licensing, and no install-time scripts. Its workflow uses unpinned actions and the repository has no security policy, so keep routine update review.
84%
Total Score
100
100
94
75
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but the package's recent releases, activity, and organizational backing make it a minor concern rather than an abandonment signal.
The repository has no security policy. That weakens disclosure transparency, although it is partly offset by the active organization and current maintenance.
The sole workflow was fully analyzed with no injection paths or audit findings, but both of its two action references are unpinned. That is a supply-chain hygiene gap, not a severe risk on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
togul/php-sdk Version ^3.1 | — | — |
illuminate/support Version ^10.0|^11.0|^12.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.