Documentation is thin, and the repository has no security policy. The package is actively releasing with notes for this version, but maintenance remains concentrated in one contributor.
67%
Total Score
67
83
50
Only one registry account can publish releases. This is a limited publishing base, though the linked repository confirms active work by the corresponding owner.
This release includes GitHub release notes describing fixes and features; missing tests, changelog, and README files in the package are not by themselves concerning for a compiled or source library artifact, but the absent README reduces consumer guidance.
All 35 recent commits came from one contributor, leaving no demonstrated handoff capacity if that contributor stops maintaining the project.
The repository has zero stars, forks, and watchers. This is weak supporting evidence rather than a standalone abandonment verdict, especially for a package only 83 days old.
Composer build tooling is present, but no security-scanning tooling was detected, leaving security-quality checks less transparent.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.