It has a clear README, release notes, a matching repository, and a security policy. One registry maintainer and limited issue activity reduce confidence in long-term continuity.
68%
Total Score
50
100
100
100
The registry lists one maintainer. That is a limited publishing base for a user-owned project and increases continuity risk, although the repository itself is active enough to provide some compensation.
The repository recorded zero commits and zero active maintainers in the past three months. The recent release and June 2026 push provide some continuity, but this is still a meaningful maintenance concern.
All five workflows were analyzed, but all nine action references are unpinned. The audit also found high-confidence bot-condition and unpinned-container-image issues; the pull_request_target workflow has no untrusted checkout or script-injection sink, so these are workflow hygiene concerns rather than a severe release risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
fakerphp/faker Version ^1.20 | — | — |
wnx/php-swiss-cantons Version ^5.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.