This release appears usable and reasonably transparent, with an MIT license, a complete README and changelog, a matching organization-backed repository, repository tests and documentation, no deprecation, no install-time scripts, and read-only CI permissions. The main limitation is that v0.7.0 is brand new: it has only one release, no established release cadence, and no measurable three-month commit or issue activity; these metrics are partly explained by the package being published today but still leave maintenance maturity unproven. Zero popularity and the absence of repository security-scanning tools provide additional, lesser concerns. Overall, this is a promising but immature dependency whose long-term maintenance should be monitored.
72%
Total Score
75
100
78
100
This is the first and only release, published today, so there is no demonstrated release cadence or historical maintenance record; the very recent publication explains but does not remove this maturity gap.
The repository reports zero commits and zero active maintainers in the last three months, likely because it was created or populated recently, but there is no established activity record yet.
There are no issues or pull requests and no recent issue activity; given the repository's apparent newness this is not severe, but it leaves community maintenance activity unproven.
The repository currently has zero stars, forks, and watchers; this is weak supporting evidence and is unsurprising for a package published today, but it provides no external adoption signal.
Composer build tooling is present, but no security-scanning tool was detected; this is a transparency and process gap rather than a severe risk because other CI and security signals are positive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
atelier/svg Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.