The repository is small but clearly tied to the package, with a useful README and a minimal dependency footprint. It has no recent registry releases or recent commits, so pinning this version warrants caution.
62%
Total Score
100
100
81
75
The package has 41 releases over roughly seven years, but none in the last 12 months and its latest registry release was in May 2024. This indicates a meaningful maintenance slowdown, despite the historically regular release interval.
Composer is used for the build, which fits the package ecosystem. No security scanning tooling was detected, leaving a modest repository hygiene gap.
The repository has no published security policy. This reduces transparency for reporting vulnerabilities, although it is a secondary concern for this small recipe package.
The recorded profile is stable rather than prerelease-heavy, which supports predictable adoption. However, the indicator reports latest version 1.14.0 while the assessed release is 2.1.2, leaving some release metadata inconsistency.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.