It includes a clear README, tests, an MIT license, and only one runtime dependency. Recent activity is sparse, and all three workflow actions are unpinned, so ongoing maintenance and build reproducibility deserve attention.
72%
Total Score
75
100
83
75
The package has existed since March 2019 and received one release in the last 12 months, but its median release interval of about 346 days indicates a slow maintenance cadence.
There were no commits or active maintainers in the last three months, which is a maintenance concern, although the repository has a recent release and push in the available history.
The repository has one star, no forks, and one watcher, indicating a very small adoption and contributor footprint; this is supporting evidence rather than a verdict.
Composer build tooling is present, but no security scanning tooling was detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, reducing clarity for reporting and handling vulnerabilities in a package intended for dependency use.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.