Abstract storage for abstract data.
70%
Total Score
caution
A two-day-old package with rapid releases, one maintainer, and limited security oversight is promising but not yet mature.
Only one registry account, Mikhail (Balpom), has publishing access. That is a thin operational base for continuity, with no organizational backing shown.
The registry namespace and repository owner both identify the same individual account, so ownership is consistent, but no organization backing is shown.
The package is only 2 days old, with 6 releases and a median interval of about 3 hours. This shows active initial work but provides too little history to establish long-term maintenance reliability.
Composer build tooling is present, but no security scanning tools were detected. For a new library, this is a modest oversight gap rather than a severe risk.
The repository has no security policy. That reduces transparency about vulnerability reporting and handling, especially for a storage library, though the project is very new.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
balpom/files Version >=2.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.