A clear README, matching repository, MIT licensing, and no install scripts make the package transparent to consume. The long pause in releases and commits leaves maintenance uncertain, so pinning this version is prudent.
58%
Total Score
75
81
75
The package has 12 releases, but all were published within a short initial period and none appeared in the last 12 months; the latest release was about 17 months ago. This is a meaningful maintenance concern.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the long release gap and leaving current maintenance capacity uncertain.
Composer is used for the build, but no security-scanning tool is configured. This is a minor transparency and maintenance gap rather than a severe risk.
The repository has no security policy, reducing transparency for reporting and handling vulnerabilities. This is a hygiene gap, though the package is small and no other security weakness was observed here.
Version v0.0.12 is not a stable major release, so the package may still change compatibility expectations. It is not marked as a prerelease, which partly offsets the concern.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.