Its compact structure, MIT license, and repository tests provide a clear maintenance baseline. A small contributor base and no security tooling or policy leave less backup if maintenance stops.
72%
Total Score
83
100
86
75
All three recent commits came from one contributor, leaving a thin maintenance base. Organization backing partly reduces handoff risk but does not remove the concentration concern.
Composer build tooling is present, but no security scanning tools were detected, leaving security checks less visible and less systematic.
The repository has no security policy, so vulnerability reporting and response expectations are not documented.
Version 0.44.1 is not a prerelease, although the package has not reached a stable major version; this is a modest maturity limitation rather than a severe concern.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
psr/clock Version ^1.0 | — | — |
symfony/cache Version ^6.4 || ^7.4 || ^8.0 | — | — |
flow-php/filesystem Version self.version | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.