Clear documentation, licensing, and repository tests make integration and review easier. The short history and single-contributor activity leave some longer-term continuity risk, while missing security tooling reduces assurance.
77%
Total Score
100
81
83
The project is only 48 days old but has published 43 releases, with a median interval of about 20 hours. This shows active iteration, though the short history leaves long-term maintenance unproven.
Composer is used for builds, but no security-scanning tools were detected. That is a meaningful transparency and assurance gap for a dependency, though it is not evidence of a defect.
The repository has no security policy. This weakens the documented process for reporting and handling vulnerabilities, but it does not by itself indicate abandonment.
Version v0.20.3 is a regular, non-prerelease release, but the project remains below 1.0. That signals an API may still evolve substantially despite the steady release activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^7.0 || ^8.0 | — | — |
psr/container Version ^1.1 || ^2.0 | — | — |
nikic/php-parser Version ^5 | — | — |
opis/json-schema Version ^2.4 | — | — |
docuccino/attributes Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.