Clear documentation, tests, and release notes make the project easier to evaluate. Its recent history, single-maintainer activity, and workflow hygiene leave more maintenance risk than an established dependency.
62%
Total Score
50
100
81
100
The repository is owned by an individual user rather than an organization, so the single-contributor concentration is not offset by visible organizational backing.
The package is only 99 days old with five releases, so its rapid release history shows activity but does not yet demonstrate long-term maintenance.
All four recent commits came from one contributor, leaving maintenance dependent on a single person despite the repository being clearly linked to the package.
Four commits were made in the last three months, showing some activity, but the volume is modest for a very new framework.
Composer build tooling is present, but no security-scanning tool was detected, leaving a repository hygiene gap for a framework package.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.