Usable with caveats: the package is clearly structured, tested, licensed, and backed by a matching repository, but it is a very early alpha with only one release and no commits in the last three months. Its zero-activity repository and lack of security scanning make it a weak choice for critical accounting workloads without further validation.
62%
Total Score
50
100
79
88
This package has only one release, published about 4.5 months ago, so there is little evidence of an established release process or sustained maintenance.
There were no commits and no active maintainers in the last three months. For a package this new, that is a meaningful warning that development may have stalled.
Composer build tooling is present, but no security scanning tools were detected. That is a transparency and maintenance gap for a package handling financial calculations, though it is not by itself evidence of an unsafe release.
The repository has no security policy. This weakens the project's disclosure and response transparency, particularly for an enterprise-oriented package.
The assessed version is v0.1.0-alpha1 and all recent releases are prereleases, indicating an immature API and higher compatibility risk for dependents.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.