The package is clearly licensed, has repository tests, and documents this release with GitHub notes. Its 0.x status and modest release history provide limited evidence of long-term maturity.
62%
Total Score
60
100
81
75
Only one registry account has publish access, which creates a narrow release path; the repository is user-owned, so there is no organizational backing shown to offset that concentration.
The registry namespace and repository are owned by the same individual account, confirming package ownership but providing no organizational backing to compensate for a concentrated maintainer base.
Four releases over 536 days, with two in the last 12 months and a median interval of about 98 days, show ongoing but modest maintenance activity.
All recent commits came from one contributor, leaving the project dependent on a single active maintainer with no demonstrated handoff capacity.
Two commits from one active maintainer in the last three months show recent maintenance, but the low volume limits evidence of sustained development capacity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
garak/card Version ^0.10 | — | — |
doctrine/collections Version ^2.0 || ^3.0 | — | — |
symfony/polyfill-php84 Version ^1.38 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.