The package is clearly documented, tested, licensed, and backed by an organization with a matching source repository. Its young history, pre-1.0 version, and no commits in the past three months warrant monitoring as adoption increases.
68%
Total Score
83
100
79
100
This is a young package, first released 41 days ago, with only two releases and a 41-day median interval. The recent second release shows some activity, but the short history limits confidence in long-term maintenance.
The repository recorded zero commits and zero active maintainers in the past three months. Because the project is only 41 days old and has a recent release, this is a maintenance warning rather than evidence of abandonment.
Composer build tooling is present, but no security-scanning tools were detected. This is a modest repository-hygiene gap, not a standalone dependency-health failure.
v0.7.0 is not a prerelease, but the package remains below 1.0, so compatibility expectations are less mature than for a stable-major release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/container Version ^2.0 | — | — |
coretsia/core-kernel Version ^0.7.0 | — | — |
coretsia/core-contracts Version ^0.7.0 | — | — |
coretsia/core-foundation Version ^0.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.