The MIT license, clear README, repository tests, and read-only workflow permissions support adoption. The repository does not mention the package in its README, and all seven workflow actions are unpinned.
56%
Total Score
75
79
67
This is the only release, published about 10 months ago, so there is little release history to demonstrate sustained maintenance.
There were no commits and no active maintainers in the last three months, a meaningful warning for a package with only one release.
The repository name does not match the package name and its README does not mention the package, creating uncertainty about whether it is the package's intended source repository.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance gap.
The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
crustum/notification Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.