Composer is the only runtime dependency, and the repository is not archived. Its sole contributor limits continuity, while the missing license and README reduce transparency.
52%
Total Score
75
70
No license is declared, and neither the package nor the linked repository contains a recognized license file. This creates a real adoption and reuse constraint.
The package has no README, which matters for a framework-style library that consumers must integrate with; missing tests and changelog files are normal packaging practice and do not add concern.
This is the package's first and only release, published today, so there is no track record for maintenance or release stability yet.
All 12 recent commits came from one contributor, so maintenance depends entirely on a single person and has limited continuity if they stop contributing.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.