The README and release notes explain the API, while organization backing, an MIT declaration, and no install-time scripts improve transparency and adoption safety. The repository remains lightly validated, with no tests or security policy.
61%
Total Score
67
100
88
75
This package is only 93 days old and has one release, so there is little evidence of sustained maintenance or release discipline.
One contributor made all commits in the last three months. Organization ownership provides some handoff capacity, but no second active contributor is shown.
Only one commit was recorded in the last three months, indicating very limited observed development activity for this young project.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tool is reported.
The repository has no security policy. For a small library this is a transparency gap, though it is not evidence of unsafe code by itself.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
league/plates Version ^3.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.