The package is clearly identified, licensed, tested, and easy to install with one runtime dependency. Documentation is present, but formal security and broader maintenance safeguards are limited.
56%
Total Score
50
100
83
88
The package has had only three releases, with none in the last eight years; this strongly suggests the published release is stale even though the repository shows recent activity.
One contributor made 100% of the recent commits, leaving maintenance dependent on a single active contributor.
Only one commit was recorded in the last three months, so current maintenance capacity is limited despite the repository's recent push date.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest assurance gap.
The repository has no security policy, making vulnerability reporting and response expectations less transparent.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.