Clear licensing, tests, and organization backing improve transparency, while the small dependency surface keeps adoption straightforward. The workflow is audited but uses two unpinned actions, so updates should be watched.
60%
Total Score
83
100
86
100
The package has had no release in about four years, with all three releases published on the same day. That strongly limits evidence of ongoing maintenance, although the package may be intentionally stable.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap. This raises abandonment risk despite the package's small scope.
The project uses Composer build tooling, appropriate for a PHP package. No security scanning tool was detected, which is a minor hygiene gap but not decisive for this small adapter.
The single workflow was fully analyzed with no dangerous triggers or audit findings, but both of its two action references are unpinned. That is a modest reproducibility and supply-chain hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/simple-cache Version ^3.0 | — | — |
webclient/cache-contract Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.