The package is clearly licensed, documented, and tested in its repository, with read-only workflow permissions. All action references are unpinned, and no security policy or security scanning is present.
65%
Total Score
83
100
81
83
The package is only 3 days old with two releases, so its maintenance record is too short to demonstrate long-term reliability.
All 10 recent commits come from one contributor, leaving maintenance highly dependent on a single person; organization backing provides some compensation but does not remove the concentration risk.
Composer build tooling is present, but no repository security scanning tools were detected, leaving security-process coverage limited.
The repository has no published security policy, reducing transparency about vulnerability reporting and response.
This release is a beta and all recent releases are prereleases, so the API may still change and production stability is not established.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.