The small dependency footprint and thorough test suite reduce integration risk. Missing security scanning and a single registry maintainer add modest concerns alongside the long maintenance gap.
58%
Total Score
50
100
75
75
The latest release was in March 2021, with no releases in the last 12 months and only three releases over roughly eight years. This is strong evidence of a dormant project.
The package and repository are owned by the same individual account, so the source ownership is consistent; the single-person backing provides limited continuity if that maintainer stops working.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the evidence that maintenance has stopped rather than merely slowed.
Composer build tooling is present, but no security scanning tools were detected. For a development CLI, this is a meaningful transparency and maintenance gap, though not evidence of unfitness by itself.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented. This matters more for a tool used in development workflows, but it is not severe on its own.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.