It has clear documentation, tests, matching source, MIT licensing, and only one runtime dependency. Pin 1.0.0 while waiting for renewed maintenance and tighter workflow action pinning.
68%
Total Score
50
100
88
50
The package has three releases over about 16 months, with one release in the last 12 months; the roughly 11-month gap since the latest release suggests slowing maintenance but not abandonment on its own.
There were no commits and no active maintainers in the last three months, indicating currently quiet maintenance and increasing abandonment risk.
Composer build tooling is present, but no security scanning tools were detected; this is a modest transparency and assurance gap for a small package.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.
Both workflows were analyzed successfully with no detected injection sinks or dangerous findings, but all three action references are unpinned, leaving them exposed to upstream changes.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
tourze/enum-extra Version 1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.