Documentation, tests, and release notes make the package easier to maintain and adopt. The declared MIT license differs from the detected BSD-3-Clause file, and all four workflow actions are unpinned.
70%
Total Score
67
100
81
67
The artifact declares MIT but its license file was detected as BSD-3-Clause, creating a licensing ambiguity despite having a license file and repository license.
The repository is owned by an individual user rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
All 22 recent commits came from one maintainer, leaving maintenance dependent on a single active contributor.
Composer is used for builds, but no security-scanning tool was detected, leaving a modest transparency and monitoring gap.
The repository has no published security policy, so the process for reporting and handling vulnerabilities is unclear.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.