Documentation, tests, release notes, and a simple dependency profile support adoption. The project is still young and maintenance is concentrated in one contributor, while repository security safeguards are limited.
78%
Total Score
67
100
83
83
The package is only 103 days old with three releases and a median interval of about 36 days, so its maintenance track record is still limited.
One contributor made all two recent commits, leaving maintenance highly concentrated. Organization backing provides some handoff capacity, but no second active contributor is shown.
Only two commits were recorded in the last three months, so there is limited observed maintenance activity; the package's recent release partly offsets that concern.
The repository has zero stars, forks, and watchers. This is weak supporting evidence, but popularity is not required for a small, focused package and does not outweigh its documentation and tests.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.