It has a clear MIT license, repository tests, release notes for this version, and only PHP as a runtime dependency. The organization-backed project has little adoption evidence, so future maintenance remains the main uncertainty.
67%
Total Score
75
100
86
75
The package is young at 118 days and has only two releases, with a median interval of about 5 days. This shows recent publication activity but provides limited long-term maintenance evidence.
The repository recorded no commits and no active maintainers during the last three months. The repository was pushed more recently, which softens the concern, but sustained maintenance is not yet demonstrated.
The repository has zero stars, forks, and watchers, offering no independent adoption signal. Low popularity is not decisive for a young, focused library but leaves less external evidence of maturity.
All five workflows were analyzed without failed files or dangerous findings, but all 12 action references are unpinned. This is a supply-chain hygiene gap, though no untrusted checkout, script injection, or broad top-level write permission was observed.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.