Модуль статей
58%
Total Score
caution
Usable with caveats: only two releases, both nearly three years old, despite a recently pushed source repository.
Only one registry account has publish access. That is limited publishing redundancy, but repository activity and matching project ownership provide some compensation.
The package has only two releases, both published in December 2023, with no releases in the last 12 months. This is a substantial maintenance concern for a dependency, though the linked repository was pushed more recently.
The repository recorded no commits and no active maintainers in the last three months. This weakens evidence of ongoing maintenance, although the repository had a recent push before that period.
Composer is used as a build tool, but no security scanning tools were detected. The missing scanning is a modest transparency and hygiene concern, not evidence that the release is unsafe.
The repository has no security policy. This limits the documented process for reporting and handling vulnerabilities, but is not by itself an abandonment signal.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.