The package has a detailed README, a license file, and a small dependency footprint. The repository could not be found for maintenance verification, and the artifact license conflicts with the declared license.
48%
Total Score
100
60
100
All 14 releases were published today, so the package has no demonstrated maintenance history or long-term release stability yet.
A GPL license file is present, but the declared GPL-2.0-or-later license does not exactly match the artifact's detected GPL-2.0 text, creating a licensing clarity concern.
The assessed version is a pre-release alpha, and the recent release mix includes pre-releases. That is expected for an early project but indicates the API and behavior may still change.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
composer/semver Version ^3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.