Usable with caveats: it is actively developed and well documented, but this is a very new 0.x package maintained by one contributor. Treat it as an early-stage dependency rather than a mature, established testing framework.
72%
Total Score
67
100
81
80
The registry namespace and repository are owned by the same individual account, so there is no organization backing to compensate for the single-contributor maintenance concentration.
Five releases in 14 days, with a median interval of about 3.5 days, show active early development; however, the 14-day package age means long-term maintenance is not yet demonstrated.
All 59 recent commits came from one contributor, leaving maintenance dependent on a single individual and creating a meaningful continuity risk.
Composer and Just are used for build tooling, but no security scanning tools were detected; the build setup is present while automated security coverage is limited.
No repository security policy was found, reducing the clarity of vulnerability-reporting procedures for a package intended to run in development and CI environments.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.