This release appears suitable to depend on, with strong package hygiene, explicit MIT licensing, tests, a matching repository, no deprecation, no install-time scripts, and very active recent release and commit activity. The main reservations are that the project is young (86 days old), all 19 recent commits came from one contributor, the repository has no security scanning or security policy, and the repository has no measured popularity; organization backing and the repository's complete test-bearing structure partially offset those concerns. The v0.x version also indicates an API that may still evolve.
78%
Total Score
75
100
78
90
The package is only 86 days old, but it has 16 releases in that period with a median interval of about 16 hours, showing active iteration; the short history limits demonstrated long-term maturity.
One contributor made all 19 commits in the last three months, creating a real continuity risk; organization ownership provides some ability to hand maintenance off but does not remove the concentration concern.
There are no open issues or pull requests, and no recent issue or PR activity; this is neutral for a young package but provides little evidence of community maintenance.
The repository has zero stars, forks, and watchers, so there is no external adoption evidence; popularity is supporting evidence only and does not outweigh the demonstrated release and commit activity.
Composer build tooling is present, but no security-scanning tools are configured, leaving a security-process gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^1.0 || ^2.0 | — | — |
contenir/storage Version ^0.6.1 | — | — |
laminas/laminas-cli Version ^1.8 | — | — |
laminas/laminas-mvc Version ^3.0 | — | — |
laminas/laminas-http Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.