The repository has no security policy, and its only workflow uses a broadly writable token with an unpinned action. A README, changelog, release notes, and a non-archived repository provide useful transparency for adopters.
58%
Total Score
50
88
67
The package has 14 releases since August 2022, but none in the 12 months measured and the latest release was on March 31, 2025; this points to slowing maintenance.
The repository recorded zero commits and zero active maintainers in the measured three-month period, consistent with the broader maintenance slowdown.
Composer is used as a build tool, but no security scanning tools were detected; this is a transparency and hygiene gap rather than evidence of unsafe code.
The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.
The single analyzed workflow has top-level write permissions and its one action use is unpinned. No untrusted checkout, script injection, or auditor findings were detected, so this is a hygiene caution rather than a severe workflow risk.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.