Documentation and licensing are clear, and the workflow audit found no high-risk issues. The project is lightly tooled and has a very small user and maintainer base, so validate generated specifications before broad adoption.
57%
Total Score
25
83
75
There were 0 commits and 0 active maintainers in the last three months, indicating that maintenance has stopped or is currently dormant after the initial release period.
The registry namespace and repository are owned by the same individual account, so there is no organizational backing shown to compensate for the single-maintainer structure.
The package has only two releases, both published within minutes on January 6, 2026, with no later release during roughly eight months of package age. This suggests limited demonstrated maintenance capacity.
The repository has 1 star, 0 forks, and 0 watchers. Popularity is only supporting evidence, but these counts provide little independent evidence of community review or adoption.
Composer is used for the build, but no security scanning tools are configured. The missing scanning is a modest transparency and maintenance gap rather than proof of a defect.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.0|^7.0 | — | — |
nikic/php-parser Version ^5.0 | — | — |
illuminate/console Version ^10.0|^11.0 | — | — |
illuminate/routing Version ^10.0|^11.0 | — | — |
illuminate/support Version ^10.0|^11.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.