The package includes a clear README, MIT licensing, release notes, and repository tests. Its dependency footprint is small, and two contributors are actively making changes, but the release remains an early candidate; pin it if accepting prerelease churn.
70%
Total Score
83
100
83
83
The repository is owned by a user account rather than an organization, so there is no provided evidence of broader organizational maintenance capacity.
The package was first released today and has only three releases, so there is little evidence of long-term stability despite rapid initial publishing.
Composer build tooling is present, but no security scanning tool was detected, leaving a meaningful maintenance and supply-chain hygiene gap.
The repository has no security policy, so there is no documented process for reporting or handling vulnerabilities.
This is a prerelease, and all recent releases are prereleases; that indicates an API or behavior surface still subject to change.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.