The package is small and well documented, with a matching repository, tests, and a minimal dependency footprint. Its security documentation is thin, leaving less visibility into how issues are handled.
60%
Total Score
100
79
75
The last release was in November 2021, with no releases in the last 12 months. That long pause raises maintenance and abandonment concerns, although the package is small and the repository remains available.
The repository has zero stars and forks and only one watcher, so there is little community evidence to compensate for the long period without releases. Popularity is supporting evidence, not decisive on its own.
Composer is used as the build tool, which fits the package ecosystem. No security scanning tools are configured, a modest hygiene gap for a package with otherwise limited project activity.
The repository has no security policy. That does not make the package unsafe by itself, but it provides little guidance for reporting or handling vulnerabilities.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.