Usable with caveats: the package has a stable history, an active organization-backed repository, tests, and no install scripts or dangerous workflows. However, it has had no registry release for about 2 years 4 months, no commits in the last 3 months, and its workflows do not declare top-level token permissions.
70%
Total Score
67
100
88
83
The package has 21 releases over more than 11 years, but it has had no release in about 2 years 4 months, which raises maintenance and freshness concerns for a dependency.
No commits and no active maintainers were recorded in the last 3 months, a meaningful sign of currently low maintenance activity. The recent repository push provides some compensation but does not show ongoing development in this window.
There are 14 open issues and 2 open pull requests, while no issues or pull requests were closed or merged in the last month; this suggests unresolved maintenance demand.
The repository uses Composer and Make, but no security-scanning tools were detected, leaving a modest security-process gap.
All four workflows lack top-level token-permission declarations. No workflow requests top-level write access, which limits the observed risk, but explicit least-privilege settings would provide stronger workflow hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
nette/forms Version ^3.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.