The project is very young and all recent work comes from one contributor. Its documentation appears aimed at a different battery product, while the workflows leave every action unpinned and provide no security policy; active commits and a clear MIT license help, but do not remove those concerns.
58%
Total Score
63
100
81
67
The registry lists one maintainer, which is consistent with the repository's single active contributor but leaves little visible publishing redundancy.
The repository contains the expected PHP source and Composer manifest, but its 46-file tree spans many unrelated ecosystem publishing workflows and language manifests, reducing transparency about this package's actual build.
The repository is owned by a personal user account rather than an organization, so the single-contributor and single-maintainer concentration is not offset by visible organizational backing.
The package is only 17 days old with two releases, so its maintenance record is too short to establish maturity or long-term reliability.
One contributor made 100% of the 51 recent commits, creating a high bus-factor risk for continued maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.