The project has strong packaging basics, tests, licensing, and an active organization behind it. Recent maintenance is limited to one commit in three months, with all eight workflow actions unpinned.
70%
Total Score
67
88
100
This is a mature package released over 11 years with 11 releases, but it had only one release in the last 12 months, indicating a slow cadence.
All recent commits came from one contributor, creating concentration risk, although the repository is owned by an organization that can provide some handoff capacity.
The repository recorded one commit in the last three months from one active maintainer; this demonstrates some recent attention but a limited maintenance pace.
The project uses Composer and Make, supporting reproducible development workflows, but no security scanning tools were detected.
All four workflows were analyzed without dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all eight action references are unpinned, leaving avoidable update and provenance risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/http Version ^3.2.3 | — | — |
nette/forms Version ^3.1.14 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.