GPL licensing, Greenpeace ownership, and Composer/Sonar tooling provide solid project transparency. The repository is small and lacks a security policy, so ongoing maintenance deserves attention.
69%
Total Score
75
100
50
The repository had no commits and no active maintainers in the last three months. This is a meaningful maintenance concern, although the recent package release provides some evidence that the project has not been abandoned outright.
No security policy is present in the repository. This is a transparency and issue-handling gap, but it is not by itself evidence that the package is unsafe to depend on.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.