The package is small and tested, with a lean dependency set and no install-time scripts. Maintenance depends on one person, and the linked repository does not clearly identify or document this package; pin version 0.6.5 and confirm ownership before relying on it.
68%
Total Score
75
100
83
83
All 14 recent commits came from one contributor, so maintenance and release continuity depend entirely on a single person.
The repository name does not match the package name, and no README mention was available, so the link between the registry package and source repository is not clearly established.
The repository has no stars or forks and only one watcher; popularity is not required for a healthy small package, but this provides little external evidence of adoption or review.
Composer build tooling is present, but no security scanning tooling was detected, leaving security hygiene less visible.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
alcamo/exception Version ^0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.