The package is small and well documented, with tests, a changelog, and a matching source repository. Releases are infrequent and the repository had no commits in the last three months; it also lacks a security policy.
64%
Total Score
67
78
83
The package has only four releases over about two years and nine months, with one release in the last 12 months and a median interval of about 291 days; this indicates a slow maintenance cadence.
There were no commits and no active maintainers in the last three months. Although the repository was recently pushed, the short-term activity is too quiet to support a strong maintenance assessment.
There are no open issues or pull requests and no recent issue or pull-request activity. This is compatible with a small stable component, though it provides little evidence of an active contributor community.
The repository has zero stars and forks and only one watcher. This is weak supporting evidence, but it does not outweigh the package's complete structure and organizational ownership.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest verification gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.