Storage-agnostic session contract with namespace-scoped key/value access for PHP.
78%
Total Score
healthy
A well-documented first release with solid project structure, but little history and unpinned workflow actions.
This is the package's first release, published 0 days ago, so there is not yet evidence of sustained release maintenance. That is expected for a new package but limits maturity confidence.
Composer build tooling is present, but no security scanning tool was detected. For a small first release this is a modest transparency gap rather than a severe risk.
The repository has no security policy. That weakens the project's documented response path, though the package is a minimal interface with no runtime dependencies.
Version v0.1.0 is an initial minor release rather than a stable major release, indicating an early API and some adoption risk. It is not marked as a prerelease, which partly offsets the concern.
The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, script injection, or findings. Both analyzed action references are unpinned, leaving avoidable update and integrity risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.