The README, changelog, MIT declaration, and lack of install scripts provide useful baseline transparency. The project has no security policy and minimal public traction, so pinning this version is preferable to relying on ongoing maintenance.
58%
Total Score
75
83
75
This package is 256 days old but has only one release, so there is no established release track record or evidence of continued publishing.
There were zero commits and zero active maintainers in the past three months, leaving current maintenance capacity unproven.
The repository has zero stars, forks, and watchers, providing no community traction to offset the limited release history.
Composer build tooling is present, but no security scanning tooling was detected; this is a modest transparency and maintenance gap for a dependency generator.
The repository has no security policy, so there is no documented route for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.