Clear documentation, tests, and a dependency-free design reduce integration and maintenance friction. The organization-backed repository and stable release are reassuring, but the project is still young and has limited independent activity and security-process evidence.
68%
Total Score
67
100
88
83
The package is only 92 days old and has one release, so its maintenance track record is not yet established.
All recent commits come from one contributor, which is a thin practical maintainer base; organization backing provides some ability to hand maintenance off.
Only one commit from one active maintainer was recorded in the last three months, providing too little activity history to establish durable maintenance.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest process gap for a package intended as a reusable library.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.