The package is licensed, not deprecated, and has a source repository that matches its name. Its stable release history and simple Composer setup provide some reassurance, but no automated security checks are visible.
60%
Total Score
50
88
50
The artifact has no README, tests, or changelog, and the repository reports none either; for a small library, the missing consumer documentation and validation reduce transparency.
The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful maintenance concern for a package only about 5 months old.
Composer is used for the build, but no security-scanning tool is configured, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.