Clear MIT licensing and modest runtime dependencies make integration straightforward. The project is still young, so long-term resilience is less proven.
70%
Total Score
63
100
94
50
Only one registry account can publish releases, which is a resilience concern for a user-owned project, although repository activity shows another active contributor.
The repository is owned by an individual rather than an organization, so the concentrated contributor activity and single registry publisher provide less organizational continuity.
One contributor made about 93% of the recent commits, leaving maintenance highly concentrated; the second contributor provides some, but limited, backup.
The repository has no security policy, reducing transparency about vulnerability reporting and response expectations.
The release is not prerelease, but it remains on major version 0, so compatibility expectations are less established than for a stable major release.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
statamic/cms Version ^5.0 || ^6.0 | — | — |
prism-php/prism Version ^0.99 || ^0.100 | — | — |
deeplcom/deepl-php Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.