Clear documentation, licensing, and release notes make the package easier to evaluate and adopt. Its very young history, no recent commits, minimal repository traction, and limited security and workflow safeguards warrant caution.
57%
Total Score
25
78
67
The repository recorded zero commits and zero active maintainers in the last three months, despite the package's recent release history. That is a meaningful maintenance and abandonment concern for a young library.
The package and repository are owned by the same individual account. This supports ownership consistency, but there is no organization backing to compensate for the thin observed maintainer activity.
The package is only 189 days old and made six releases, all within the last 12 months, with a median interval of about 5 hours. This shows initial activity but not yet a long maintenance record.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these figures provide no external sign of an established user or contributor base.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a hygiene gap for a package that handles imported data and database operations.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.