The stable version, focused dependency set, and matching repository make integration straightforward. Maintenance capacity is limited by no commits or releases for over a year, a single registry maintainer, and no security tooling or policy.
62%
Total Score
67
100
88
88
One registry account has publish access. This is a limited publishing base for a user-owned project and increases continuity risk if that maintainer stops supporting it.
The package has six releases since October 2021, but no release in the 12 months before collection and its latest release was over a year ago, which lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the three months before collection, supporting the concern that maintenance has gone quiet.
Composer is used for the build, but no security scanning tool is configured, leaving automated detection and maintenance oversight limited.
The repository has no published security policy, reducing transparency for reporting and handling vulnerabilities in a webhook integration library.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.