Clear documentation, release notes, repository tests, and active organization backing support adoption. The single-contributor history, absent security policy, and workflow credential sharing leave meaningful maintenance and CI hygiene concerns.
68%
Total Score
75
100
83
75
The package is extremely new, with 28 releases appearing within the same day and a median interval of 0 days. This shows activity but provides little evidence of long-term maintenance or release stability.
One contributor made all eight recent commits, creating a concentrated maintenance base. Organization ownership provides some handoff capacity, but no second active contributor is shown.
The repository has eight commits in the last three months, showing recent activity, but all activity comes from one active maintainer.
The repository has zero stars, forks, and watchers. Popularity is supporting evidence rather than a verdict, but these counts provide no external maturity signal for this new project.
Composer build tooling is present, but no security scanning tool is reported, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^1.1 || ^2.0 || ^3.0 | — | — |
league/flysystem Version ^3.29 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.