Forgeia AI Provider for NVIDIA for the PHP AI Client SDK. Works as both a Composer package and a WordPress plugin.
68%
Total Score
67
100
88
83
The repository owner is an individual account rather than an organization, so there is no shown organizational handoff capacity to offset the concentrated contributor base.
One contributor made all 21 commits in the last three months, giving the project a bus factor of one. That concentration increases abandonment and continuity risk for a young package.
The repository name matches the package, but its README does not mention the package. That mismatch raises a modest concern that the source documentation does not clearly establish the repository-to-package relationship.
The repository uses Composer build tooling, but no security scanning tools were detected. The missing scanning is a modest hygiene gap rather than evidence of unsafe maintenance.
No security policy was found in the repository. For a package integrating hosted AI services and WordPress administration, this reduces transparency around vulnerability reporting.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.