Usable with caveats: this is a new, clearly backed release with good repository and security hygiene, but it has no track record yet and no observed post-release activity. Treat it as an early dependency and review updates before adopting broadly.
68%
Total Score
75
100
89
100
This is the package's first release, published on September 15, 2026, so there is no release history or interval evidence demonstrating sustained maintenance.
The repository has no commits or active maintainers recorded in the three-month window, but the package itself is only zero days old, so this currently indicates no established maintenance history rather than a demonstrated collapse.
The repository has no stars, forks, or watchers. This is weak supporting evidence for maturity, but popularity is not decisive and is unsurprising for a newly published package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
sylius/sylius Version ^2.1 | — | — |
scheb/2fa-totp Version ^7.13 | — | — |
lbuchs/webauthn Version ^2.2 | — | — |
scheb/2fa-bundle Version ^7.13 | — | — |
bacon/bacon-qr-code Version ^3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.