The README and package structure provide workable integration guidance, and the release is licensed and not deprecated. Maintenance evidence is weak, with no recent activity, no security policy, and minimal repository adoption.
58%
Total Score
50
81
75
Only two releases exist, with the latest published on May 2, 2023 and none in the last 12 months; this indicates a long inactive release cadence for a framework package.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of ongoing maintenance.
The repository has 1 star and no forks, so there is little community evidence to compensate for the limited maintenance activity; popularity remains supporting rather than decisive evidence.
Composer is used as the build tool, but no security scanning tools were detected; this is a modest transparency gap rather than evidence that the release is unsafe.
The linked repository has no security policy, which reduces transparency for a package handling roles, abilities, and user authorization.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.