The repository has tests, current release notes, a clear README, and a security policy. Maintenance activity is currently quiet, while every analyzed workflow action is unpinned, so pinning v6.0.0 is preferable.
64%
Total Score
67
94
75
The package has existed since July 2022 and has 233 releases, but only 2 releases in the last 12 months; the recent June 2026 release partly offsets the slower cadence.
The repository recorded 0 commits and 0 active maintainers over the last 3 months. This is a meaningful maintenance warning, although the recent push and v6.0.0 release show the project has not been abandoned outright.
There were no new or closed issues and no merged pull requests in the last month, leaving open work without recent visible resolution.
All 11 workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, or audit findings. However, all 73 action references are unpinned, which weakens build reproducibility and update control.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
cycle/orm Version ^2.11 | — | — |
spiral/core Version ^3.16 | — | — |
cycle/database Version ^2.15 | — | — |
cycle/annotated Version ^4.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.