It has a stable v1 release and recent publishing, with only two runtime dependencies. Zero repository popularity and no security policy leave limited evidence of long-term support.
72%
Total Score
75
100
78
90
The artifact and repository contain no tests or changelog, limiting verification and release context; however, tests and changelogs are not expected inside published package artifacts.
The registry namespace is company-named but the linked repository is owned by a user account, providing no clear organizational backing to compensate for the small project footprint.
The package is only 52 days old but has five releases, including activity through 28 August 2026; this shows early momentum but limited long-term history.
The repository has zero stars, forks, and watchers, so there is little community evidence to offset the project's short history.
Composer is used as a build tool, but no security-scanning tooling is present, leaving a modest gap in repository hygiene.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
october/rain Version ~v4.0 | — | — |
composer/installers Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.