Tests, a substantial README, release notes, and a security policy improve the picture. The project has little adoption and no automated security scanning, so pinning this early release deserves care.
68%
Total Score
50
78
100
The package is only 110 days old with two releases, although the median interval is about 4 days and the assessed release has detailed notes.
The repository recorded no commits and no active maintainers in the last three months; its last push was on June 5, 2026, which raises maintenance-continuity concerns.
The repository has 1 star, 0 forks, and 0 watchers, providing little evidence of broad community use or review, though popularity is supporting evidence rather than a verdict.
Composer build tooling is present, but no security-scanning tools were detected, leaving a modest transparency and maintenance gap.
This is a non-prerelease 0.9.1 release, but the pre-1.0 version indicates the API and project are not yet fully mature.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/container Version ^2.0 | — | — |
symfony/process Version ^8.1 | — | — |
symfony/filesystem Version ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.