The package has clear licensing, a substantial README, and a changelog. Its single alpha release and four-month commit gap make long-term maintenance uncertain; use it only with a pinned version and an exit plan.
57%
Total Score
50
75
75
This is the package's only release, published about 4 months and 3 weeks ago, so there is too little release history to establish dependable maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Although the project is only about 5 months old, this leaves current maintenance capacity unproven.
Composer build tooling is present, but no security-scanning tools were detected. That is a modest supply-chain hygiene gap, not evidence of a security flaw.
The linked repository has no security policy, which reduces transparency for reporting and handling vulnerabilities in a package that performs database-backed identifier generation.
The assessed version is v0.1.0-alpha1 and all recent releases are prereleases, indicating an early, potentially changing API rather than a mature dependency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.