The repository has tests, release notes, a license, and organization backing. Its workflow uses three unpinned actions, so build provenance is weaker than the otherwise solid project setup.
62%
Total Score
83
100
78
100
This is the package's only release, published today, so there is no track record for maintenance or release consistency yet.
No commits or active maintainers were recorded in the last three months; because this is a brand-new project, that mainly means maintenance capacity is not yet demonstrated.
The repository has no stars and one fork; this is limited adoption evidence, but popularity is only supporting evidence and does not outweigh the project's early stage.
Composer build tooling is present, but no security scanning tool was detected; the repository's tests and CI provide some compensating project discipline.
Version 0.7.0 is not a prerelease, which is positive, but the single-release history provides little evidence of stability in practice.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
alto/language Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.