The package includes extensive documentation, repository tests, and a matching source repository. Its small project footprint, absent security scanning, and inactive commit history leave less evidence of long-term maintenance.
65%
Total Score
75
100
89
83
There were zero commits and zero active maintainers in the last three months. This is concerning for a young package, although the recent release history provides some compensating evidence.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy. For a small testing integration this is not severe, but it provides no documented channel or process for handling security issues.
Version v0.7.0 is not a stable major release, so the API may still change even though it is not marked as a prerelease.
The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. Both action references are unpinned, which is a supply-chain hygiene weakness, while the missing top-level permissions block is acceptable on its own.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
illuminate/support Version ^10.0|^11.0|^12.0|^13.0 | — | — |
viewtrender/php-youtube-testkit-core Version ^0.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.