Healthy and usable, with a thin maintenance base. The repository is active, matches the package, includes tests and documentation, and has an organization behind it, but all recent commits come from one contributor and no security policy is published.
78%
Total Score
75
100
83
90
The package is young at 89 days and has four releases, with releases roughly 28 days apart; this shows ongoing delivery but provides limited long-term maintenance evidence.
One contributor made all seven commits in the last three months, creating a genuine continuity risk; the organization-owned repository provides some ability to hand maintenance off.
Seven commits were made in the last three months, showing recent development, but all activity came from one active maintainer.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity alone does not outweigh the active repository and organization backing.
Composer build tooling is present, but no security-scanning tools are reported. The missing scanning is a transparency gap rather than evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
psr/container Version ^2.0 | — | — |
componenta/http Version ^1.0 | — | — |
componenta/config Version ^3.0.0 | — | — |
componenta/arrayable Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.