The package has only one release, and its repository has just two stars with no recent issue or pull-request activity. A clear README, tests, a matching source repository, and minimal dependencies provide useful support, but no security policy or scanning is documented.
68%
Total Score
50
100
83
88
The repository is owned by an individual user rather than an organization, so there is no provided evidence of broader project backing to offset the thin maintenance history.
This is the only release, published about 10 months ago, so there is limited evidence of sustained maintenance or release discipline.
There are no open issues or pull requests and no activity in the measured month. With only one release, this offers little evidence of an active maintenance process.
Two stars and no forks indicate a very small user and contributor base; popularity is only supporting evidence, but this limits confidence in external scrutiny.
Composer is used for the build, but no security scanning tool is reported, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.