The package is clearly licensed and its repository matches the package, with a usable README. Its single maintainer and zero adoption metrics leave little evidence of broad support, while the missing security policy adds a smaller transparency gap.
58%
Total Score
67
75
67
Only one registry maintainer is listed, which creates a thin publishing base. The organization-owned repository provides some backing, so this is a moderate concern rather than a severe one.
Only three releases have appeared across about 21 months, with a median interval of about 219 days. Two releases in the last 12 months show the project is not abandoned, but maintenance is infrequent.
There were zero commits and zero active maintainers in the last three months. With the latest release about seven months ago, this indicates limited recent maintenance activity.
The repository has zero stars and forks and only one watcher. Popularity is not required for a small package, but these counts provide no supporting evidence of community adoption.
Composer build tooling is present, but no security scanning tool was detected. For a small package this is a modest process gap, not evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.