Clear licensing, a small dependency surface, and no install-time scripts reduce adoption friction. Security documentation and workflow pinning are still limited.
61%
Total Score
50
100
88
67
Only one registry maintainer is listed, which creates a publishing and continuity dependency on a single person for this user-owned project.
The package is only 49 days old and has one release, so long-term maintenance and compatibility remain unproven.
One contributor holds 100% of the recorded commits, leaving no demonstrated maintainer redundancy for this user-owned project.
Only one commit from one active maintainer was recorded in the last three months; the recent project age partly explains this, but maintenance capacity is not yet demonstrated.
Composer build tooling is present, but no security scanning tooling was detected, leaving security-maintenance practices less visible.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.