This release appears suitable to depend on, with a clear MIT license, a stable non-prerelease version, six releases over roughly 11 months including six in the last year, comprehensive packaged tests, and no install-time lifecycle scripts. The main limitation is transparency: no source repository was declared, so repository maintenance, commit activity, issue activity, and build provenance could not be assessed; the moderate runtime dependency set also adds some dependency-surface exposure. Overall, the artifact shows solid maturity and hygiene, but the lack of a backing repository prevents a higher-confidence or higher score.
78%
Total Score
50
100
100
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^3.0 | — | — |
ramsey/uuid Version ^4.0 | — | — |
nesbot/carbon Version ^3.0 | — | — |
psr/http-client Version ^1.0 | — | — |
psr/http-factory Version ^1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.