This is a generally healthy, licensed and usable package with a stable 1.1.0 release, a matching organization-backed repository, documented source, repository tests, CI, and no registry deprecation or install-time scripts. The main concerns are limited release history, no commits or active maintainers in the last 3 months despite a recent repository push, very low repository adoption signals, absent security policy and security scanning, and an undeclared workflow permission policy. These reduce confidence in ongoing maintenance and security hygiene, but do not currently indicate that the package is unfit to depend on.
78%
Total Score
75
100
83
80
The package is about 663 days old with five releases and two releases in the last 12 months, showing continued publishing but a relatively modest release cadence.
There were zero commits and zero active maintainers in the last 3 months, which is a meaningful maintenance concern, although the recent repository push and current release provide some counter-evidence.
There are no open issues or pull requests and no recent issue or pull-request activity. This is not inherently negative for a small stable utility, but it provides little evidence of an engaged maintenance community.
The repository has zero stars and forks and only one watcher, providing little supporting evidence of community adoption; popularity is supporting evidence rather than a decisive health verdict.
Composer build tooling is present, but no security scanning tools were detected, leaving a security-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.