Documentation, repository tests, and a matching source repository provide useful transparency. The absence of a security policy leaves a smaller hygiene gap.
65%
Total Score
50
100
86
83
This is the package's first release, published today, so there is no release cadence or operating history to demonstrate sustained maintenance. The repository's substantial contents provide some maturity evidence, but cannot replace a track record.
There are no commits recorded in the prior three months, but the repository was pushed today and the package has only just been released. This is limited historical evidence rather than a clear sign of abandonment.
Composer build tooling is present, but no security scanning tool was detected. This is a modest transparency and maintenance gap, not a severe dependency risk on its own.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear for a library that generates SQL. The extensive documentation partly improves transparency but does not replace a policy.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.