The MIT license, one runtime dependency, clear README, changelog, and repository tests support straightforward integration. Pin v0.20.3 while the project builds a longer maintenance track record.
68%
Total Score
83
100
88
88
The package is only 48 days old but has already published 43 releases, with a median interval of about 20 hours. This shows active delivery but gives limited evidence of long-term stability and makes the release cadence unusually rapid.
All 28 recent commits came from one contributor, giving the project a single-person maintenance dependency. Organization backing provides some handoff capacity, but no second active contributor is shown.
The repository uses Composer build tooling, but no security-scanning tools were detected. For a small dependency-free PHP attributes library this is a modest transparency gap, not a severe risk.
No repository security policy was found. This weakens vulnerability-reporting transparency, although the package has a small runtime dependency surface.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.