68%
Total Score
caution
Usable with caveats: only two releases and one contributor make long-term maintenance uncertain.
Only one account has registry publish access. Since the project is user-owned rather than organization-owned, this reflects a genuine concentration of publishing responsibility.
The package and repository are owned by the same individual user account, with no organization backing shown. That is consistent ownership but offers limited maintenance redundancy.
The package is only 84 days old and has two releases, both published within roughly one day. This shows initial activity but provides little evidence of sustained maintenance.
One contributor made 100% of the four recent commits. Without organization backing, this leaves maintenance highly dependent on a single person.
The repository recorded four commits in the last three months, all from one active maintainer. Recent work is positive, but the narrow activity base limits confidence in ongoing support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
spomky-labs/cbor-php Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.