The repository has no security policy or scanning, and its tiny five-file tree provides little evidence of a production-ready SDK. Organizational backing and the absence of install-time scripts are positives, but the lack of maintenance history remains a concern.
52%
Total Score
75
100
64
67
The complete five-file tree contains only one source file alongside package metadata and documentation, consistent with a minimal placeholder rather than a developed SDK.
The release includes a README, but it explicitly describes the SDK as an early placeholder and has no tests or changelog. Missing tests and changelog are normal for published artifacts, while the placeholder status is a real maturity concern.
This is the package's only release, published 100 days ago, so there is not yet enough release history to establish dependable maintenance or maturity.
There were zero commits and zero active maintainers in the last three months, indicating no observed development after the initial release.
Composer build tooling is present, but no security scanning tools were detected, leaving a notable repository hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.