The package has a clear README, release notes, and a small runtime dependency surface. Its repository shows no commits in the last three months, with no security policy or automated security scanning, so future maintenance is uncertain.
68%
Total Score
50
100
83
83
The registry namespace and repository are owned by the same individual account. This is coherent ownership, but it also indicates a single-person project rather than organization-backed maintenance.
The package has 34 releases over nearly eight years and one release in the last 12 months, showing continued publication but a currently slow cadence.
The repository recorded no commits and no active maintainers in the last three months. This is consistent with a release having just been published earlier, but it leaves limited evidence of ongoing maintenance.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these counts provide little external evidence of adoption or review.
The repository uses Composer, but it reports no security scanning tools. The missing scanning is a transparency and maintenance weakness, though not severe by itself.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.