The MIT license, README, tests, changelog, and release notes make the package easy to evaluate and integrate. GitHub Actions are fully audited with no flagged findings, though dependency pinning and security-policy coverage are limited.
68%
Total Score
83
100
79
75
The package is only 11 days old with two releases, so its maintenance record is still too short to establish long-term stability.
One contributor made all six recent commits, creating a concentrated maintenance risk; organization backing partly offsets the handoff risk.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest repository hygiene gap.
No repository security policy was found, reducing transparency around vulnerability reporting and response expectations.
7.0.0-beta2 is explicitly a prerelease, and all recent releases are prereleases; consumers should expect possible interface changes.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.