The license, tests, release notes, security policy, and organizational ownership provide useful safeguards. The project is still very young and depends on one active contributor, while its workflows leave all seven actions unpinned.
60%
Total Score
67
79
100
The package is only 54 days old and all four releases landed on the same day, so there is little evidence of sustained release maintenance yet.
One contributor made all six recent commits, concentrating maintenance knowledge and leaving the project exposed if that contributor becomes unavailable.
Six commits occurred in the last three months, showing recent activity, but the volume is still limited for a package covering payments and subscriptions.
The repository name matches the package, but its README still describes a different core-template project and does not mention this package, creating uncertainty about how specifically the repository documents the release.
Version v0.1.0 is not a stable major release, indicating an early API and a higher likelihood of breaking changes for dependents.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
dappcore/php Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.