The package has a stable release, a linked repository, and a small runtime dependency surface. Its maintenance record is limited, with no releases since February 2024, while the repository has no tests, README, changelog, or security policy.
55%
Total Score
100
78
50
The package has no README, tests, or changelog, but absent tests and changelogs are normal for published artifacts; the missing README is a minor consumer-documentation gap for this library.
The package has 5 releases, but its latest release was over two years ago and there were no releases in the last 12 months, indicating limited ongoing maintenance.
The repository has 0 stars and 0 forks, with 1 watcher. This provides little supporting evidence of community review or adoption, but popularity is not decisive for a small package.
Composer is used as a build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.
The linked repository has no security policy, leaving vulnerability-reporting and response expectations undocumented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
filament/filament Version ^3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.