The README is thorough and the package is licensed under MIT, with no install-time scripts or declared deprecation. Its dependency set is small, but the prerelease has no follow-up releases or recent commits, so adoption carries maintenance risk.
58%
Total Score
0
79
83
The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern for a young prerelease.
This package is 148 days old but has only one release, with no subsequent release to demonstrate ongoing delivery or stabilization.
Composer is used for builds, but no security scanning tools are present. This is a hygiene gap rather than evidence that the package is unsafe to depend on.
The repository has no security policy, leaving vulnerability-reporting expectations and response guidance undocumented.
The only release is v0.1.0-alpha1 and all recent releases are prereleases, so the API and behavior may still change substantially.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
azaharizaman/nexus-geo Version dev-main | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.