The package includes a clear README, tests, and matching BSD-3-Clause licensing. Its single release has had no further commits or releases, while workflow references remain unpinned and no security policy or scanning is present.
58%
Total Score
75
88
75
This package has only one release, published 194 days ago, so there is no demonstrated release cadence or track record for ongoing maintenance.
There were zero commits and zero active maintainers in the last three months, leaving no evidence of maintenance after the initial release.
Composer is used for builds, but no repository security scanning tools were detected, leaving a modest transparency and hygiene gap.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
The workflow audit completed cleanly with no dangerous triggers or audit findings, but both analyzed action references are unpinned, allowing moving action code to enter CI.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
league/uri Version ^7.0 | — | — |
league/glide Version ^3.0 | — | — |
yiisoft/yii2 Version ^2.0.0 | — | — |
league/flysystem Version ^3.0 | — | — |
intervention/image Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.