Its MIT declaration, matching repository, organization backing, and minimal dependency surface improve transparency. The package has no README or repository security policy, limiting consumer guidance and project safeguards.
62%
Total Score
75
100
79
50
The package has no README, which is a meaningful consumer-documentation gap for a Composer plugin library. Missing tests and changelog files are normal for a published artifact and do not lower the assessment.
Only two releases span about 5 years and 8 months, although one release occurred in the last 12 months. The recent release provides some evidence of activity, but the overall cadence remains sparse.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. The recent release partly offsets this, but the available activity still gives limited evidence of ongoing maintenance.
The repository uses Composer build tooling, but no security scanning tools were detected. Build tooling supports reproducibility, while the missing scanning is a modest hygiene gap.
The repository has no security policy, leaving disclosure and response expectations undocumented. This is a transparency gap, but not a severe dependency risk on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.