XML without worries
76%
Total Score
healthy
Healthy release with strong maintenance history, though recent work is concentrated in one contributor and workflow actions are unpinned.
All recent commits came from one contributor, leaving maintenance dependent on a single active developer and increasing continuity risk.
Only two commits were recorded in the last three months, indicating limited recent development activity despite the recent release history.
The repository has no published security policy, which leaves vulnerability reporting and response expectations unclear.
All five workflows were analyzed cleanly with no reported findings or untrusted checkout paths, but all 10 action references are unpinned, leaving builds exposed to moving action revisions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
webmozart/assert Version ^1.10 || ~2.0 | — | — |
php-standard-library/fun Version ^6.1 | — | — |
php-standard-library/str Version ^6.1 | — | — |
php-standard-library/vec Version ^6.1 | — | — |
php-standard-library/dict Version ^6.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.