Usable with caveats: the package is clearly documented, licensed, tested, and has no install-time scripts, but it is a young v0.1.0 release with only one release and one registry maintainer. Maintenance and project transparency remain difficult to verify.
62%
Total Score
50
100
80
100
One registry account has publish access. This is not evidence of actual inactivity, but it leaves a thin administrative base and increases continuity risk if that maintainer stops maintaining the project.
Only one release has been published, about 6 months ago, so there is little evidence of sustained maintenance or release continuity.
The latest and assessed version is v0.1.0 rather than a stable major release, indicating an early-stage API with greater compatibility risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
guzzlehttp/guzzle Version ^7.10 | — | — |
adachsoft/embedding-contracts Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.