Documentation and packaging are straightforward, with a clear license and no install-time scripts. Security documentation and automated scanning are absent, while recent work depends heavily on one contributor.
66%
Total Score
50
100
89
75
One contributor made 100% of the four recent commits. This creates a meaningful continuity risk for a framework, although the recent release and commit activity show the project is not abandoned.
The repository received four commits in the last three months, but only one active maintainer contributed them, limiting evidence of broader maintenance capacity.
The repository has only 3 stars and 5 forks, providing little independent evidence of maturity or community support. Popularity is supporting evidence, so this is a modest concern rather than a decisive risk.
Composer is used for builds, but no security scanning tools were detected, leaving automated checking coverage unclear.
The repository has no security policy, so there is no documented process for reporting and handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.