A clear MIT license, organization-backed repository, test suite, and continuing releases provide useful support. There is no security policy or automated security scanning, and the only workflow uses an unpinned action.
63%
Total Score
75
90
50
No commits or active maintainers were recorded in the last three months, which is a meaningful maintenance concern, although recent registry releases and a repository push provide some compensation.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, reducing clarity about vulnerability reporting and project security practices.
The single analyzed workflow has no top-level permissions block and its one action is unpinned; no dangerous triggers, untrusted checkouts, or audit findings were detected, keeping this a minor hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.0|^2.0|^3.0 | — | — |
yokai/batch Version ^0.7.0 | — | — |
symfony/config Version ^6.4|^7.0 | — | — |
symfony/console Version ^6.4|^7.0 | — | — |
symfony/http-kernel Version ^6.4|^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.