The package has a clear README, extensive tests, a focused file tree, and limited runtime dependencies. Its repository is active and the release cadence is strong, but security practices and maintainer diversity are limited.
76%
Total Score
75
100
88
88
All 3 recent commits came from one contributor, so maintenance depends heavily on a single person. The active release cadence provides some compensation but does not remove the continuity risk.
Composer build tooling is present, but no security scanning tools were detected. This is a process gap rather than evidence of an unsafe release.
The repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This lowers transparency for a library intended for application integration.
Version 0.1.41 is not a stable-major release, so API compatibility may still evolve. Its regular release history partly compensates for that maturity concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
wikimedia/normalized-exception Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.