The package includes tests, a stable release, and an explicit MIT license. Maintenance is concentrated in one contributor, with no security policy and no README for consumers.
68%
Total Score
50
75
50
The artifact and repository include tests, and this exact version has a GitHub release; the missing README and changelog reduce consumer documentation, especially for a library.
The package has existed for about seven years and released once in the last 12 months, with the latest release about five weeks ago. This shows continued publication but a relatively sparse recent cadence.
All recent commits come from one contributor, so maintenance depends entirely on a single person. The repository is user-owned rather than organization-owned, providing no shown handoff capacity.
Only one commit was recorded in the last three months, indicating limited recent development activity despite the recent release.
The repository has no security policy. This is a transparency and response-process gap, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tracy/tracy Version ^2.0 | — | — |
nette/database Version ^3.0 | — | — |
hidehalo/nanoid-php Version ^1.1 || ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.