The project has useful documentation, repository tests, a release note, and organizational backing. Its short history, single active contributor, absent security policy, and unpinned workflow actions leave meaningful maintenance and build-hygiene uncertainty.
68%
Total Score
75
100
83
75
This is a very young package, 82 days old, with only one release and no established release cadence. That limits evidence of long-term maintenance, despite the repository showing recent activity.
One contributor made 100% of the three recent commits. Organizational backing provides some handoff capacity, but current maintenance remains concentrated.
The repository has three commits in the last three months, showing some activity, but all activity comes from one maintainer and the project has only one release.
The repository has one star and no forks or watchers. This is weak supporting evidence, but popularity is not decisive for a young, specialized package.
Composer build tooling is present, but no security scanning tools were detected. For a package handling storage, compression, and encryption, that is a meaningful transparency gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.