Tests, static analysis, and organization backing improve confidence, while the repository remains active enough to avoid an abandonment verdict. Pin dependencies carefully because maintenance evidence is old and workflow references are unpinned.
62%
Total Score
75
86
50
The latest release was published in May 2021, and there were no releases in the last 12 months, indicating substantially slowed maintenance for this release line.
There were no commits and no active maintainers in the measured three-month period, which is a maintenance concern, although the repository's June 2025 push provides some compensating evidence.
All four analyzed workflow action references are unpinned, leaving their resolved revisions mutable; however, the audit found no untrusted checkout, script injection, or high-confidence dangerous workflow finding.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
doctrine/orm Version ^2.6 | — | — |
psr/container Version ^1.0 | — | — |
bernard/bernard Version dev-workana | — | — |
misterion/ko-process Version ^0.5.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.