Healthy and actively maintained, with a strong release history and ongoing repository work. Install with normal beta-release caution: this version is prerelease, and workflow permissions are broader or unspecified in most automation files.
82%
Total Score
100
88
88
Composer build tooling is used, but no security-scanning tool was detected; this is a modest transparency and supply-chain hygiene gap rather than evidence of abandonment.
Five of six workflows do not declare top-level permissions and one declares write access, leaving automation privileges less explicit than ideal and increasing review burden.
The assessed version is v6.0.0-beta.3, so it is explicitly prerelease even though it belongs to the stable major line; production users should expect possible changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.