The package has 25 runtime dependencies and all four workflow actions are unpinned. It includes tests, a clear MIT license, and release notes, but its 0.1.0 version remains early-stage.
58%
Total Score
50
50
79
50
The release declares 25 runtime dependencies, creating a relatively broad dependency surface for a focused bundle and increasing maintenance and compatibility exposure.
The package has three releases over about 15 months, with one release in the last 12 months and a median interval of about 83 days. This shows some release history but limited recent momentum.
There were no commits and no active maintainers in the last three months. Given the last push was in December 2025, this indicates a prolonged recent maintenance gap.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance concern rather than evidence of unsafe code.
The repository has no security policy, leaving no documented process for reporting and handling vulnerabilities. This is a transparency gap for a permission-control bundle.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3|^2|^1 | — | — |
psr/cache Version ^2.0 || ^3.0 | — | — |
doctrine/orm Version ^3.0 | — | — |
symfony/yaml Version ^7.3 | — | — |
doctrine/dbal Version ^4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.