The package has a small dependency surface, clear documentation, tests, and an explicit MIT license. Its recent work is concentrated in one contributor, so future maintenance depends heavily on the organization retaining that contributor.
78%
Total Score
83
100
88
50
All three recent commits came from one contributor, creating a concentrated maintenance base; organization backing partly reduces handoff risk but does not remove it.
Composer is used as the build tool, but no security scanning tools were observed, leaving a modest process gap.
The repository has no security policy, which reduces transparency about vulnerability reporting and response expectations.
Version 0.44.1 is not a stable-major release, but it is not a prerelease and has had no recent prerelease share, so this is only a modest maturity limitation.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.