Healthy and reasonable to depend on, with active recent releases, a current repository, clear licensing, tests, and release notes. The main caveat is that all recent commits come from one contributor and the repository has no security policy or scanning tools.
78%
Total Score
50
100
94
83
The package and repository are consistently associated with the same individual owner, which supports identity continuity but does not provide organizational backing.
One contributor made all six recent commits, so maintenance depends entirely on a single person; the user-owned project does not provide organizational handoff evidence to offset that concentration.
Six commits were made in the last three months by one active maintainer, showing current activity but a limited maintenance bench.
Composer build tooling is present, but no security-scanning tools were detected, leaving a meaningful transparency and preventive-maintenance gap.
The repository has no security policy, so users are given no documented process for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.