This is a promising but very young development-focused package. It has active recent development, nine releases in 18 days, a stable 1.5.1 release, a non-archived repository, tests and changelog coverage, build tooling, and read-only workflow permissions. The main concerns are that all 57 recent commits come from one contributor, the repository has no security policy or security-scanning tools, and the project has no observable popularity or issue activity; however, organization ownership and the package's strong repository and artifact scaffolding partly mitigate the maintainer-concentration concern. It is reasonable to evaluate as a dependency, but its short history warrants monitoring future maintenance and release quality.
78%
Total Score
70
100
83
90
Only one account has registry publish access. This is a transparency and continuity concern, but it is partly mitigated by the linked repository being owned by an organization rather than an individual.
The package is only 18 days old, which limits evidence of long-term maintenance, although nine releases in that period show active iteration rather than abandonment.
One contributor made all 57 recent commits, creating a clear single-maintainer continuity risk. Organization backing provides some potential handoff capacity, but no second active contributor is evidenced.
There are no open issues or pull requests and no issue or pull-request activity in the last month. For an 18-day-old project this is inconclusive, but it leaves community maintenance evidence absent.
The repository has zero stars, forks, and watchers. This provides no external adoption evidence, but popularity is supporting evidence only and the package is very young.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
deployer/deployer Version v8.0.5 | — | — |
phpseclib/phpseclib Version ^3.0.47 | — | — |
illuminate/encryption Version ^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.