The source repository remains active, has two recent contributors, tests, and a security policy. All eight workflow actions are unpinned, and the package-to-repository identity is unclear.
20%
Total Score
83
71
100
Packagist marks the package deprecated at package scope and names yiisoft/mutex-redis as the replacement, making this release unsuitable for a new dependency despite other healthy evidence.
The package has only two releases, with the latest published about five years ago and no releases in the last 12 months; the active repository partly offsets the stale registry history.
Two contributors were active recently, but one produced about 73% of the 11 commits, leaving maintenance somewhat concentrated.
The repository name does not match the package name and its README does not mention yiisoft/mutex-db-redis, so the package-to-repository relationship is not clearly established.
All eight workflows use read-only permissions and have no audited findings, but all eight action references are unpinned, weakening build reproducibility and supply-chain hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
predis/predis Version ^1.1 | — | — |
yiisoft/mutex Version ^1.1 | — | — |
yiisoft/security Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.