The repository includes tests, release notes, an MIT license, and no install-time scripts. Its single workflow leaves all seven actions unpinned, so maintenance and build reproducibility deserve attention.
58%
Total Score
83
100
78
67
Only two releases were published, with the latest on May 17, 2024 and none in the following two years, indicating a dormant release cadence for a maintained dependency.
There were no commits or active maintainers in the last three months, consistent with the long gap since the last release and raising maintenance concerns.
The repository name does not match the package name and its README does not mention the package, so the linkage is not clearly established even though it is under the matching owner.
The repository has only three stars and no forks, providing little supporting evidence of maturity; popularity is secondary to the maintenance signals.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.