The source tree is minimal, and no security scanning or security policy is present. The package also lacks licensing information, while its exact repository and lightweight dependencies provide some context.
52%
Total Score
50
100
69
75
No license is declared, no license file is included in the package, and no repository license file was found. That leaves the terms for using this dependency unclear.
The package is young at 195 days with three releases, released about every 45 days. This shows some delivery activity but provides limited maturity evidence.
The repository recorded zero commits and zero active maintainers in the last three months. Although the latest release was recently published, the lack of ongoing source activity raises maintenance concerns.
The repository has zero stars, forks, and watchers. This is only supporting evidence, but it provides no external adoption signal to offset the package's limited history.
Composer is used as the build tool, which fits the package ecosystem, but no security scanning tools are present. The tooling is adequate for packaging but offers limited security-process transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
exts/axl-core Version ^1.0.0-alpha.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.