This release is usable but carries meaningful maturity and maintenance uncertainty. It is a very new v0.1.1 package with only two releases, no observed commit activity or active maintainers in the measured three-month window, no tests or changelog, and no security policy or scanning tooling. Those concerns are partly contextualized by the repository being freshly pushed, the package having a matching and README-referencing repository, a clear MIT license, a small runtime dependency profile, no deprecation, and no install-time lifecycle scripts. Adopt it only if you can tolerate an early-stage CLI whose maintenance track record is not yet established.
58%
Total Score
50
100
72
80
The artifact contains a coherent small CLI structure with source files, an executable, Composer metadata, and a README, but the 20-file tree includes no tests or development documentation.
A substantive README documents this CLI and its usage, but both the artifact and repository lack tests and a changelog. For an early-stage project this is a real maintenance and verification gap.
The repository is owned by an individual user rather than an organization. This is not inherently unhealthy, but it means there is no provided organizational backing to compensate for the otherwise thin maintenance history.
The package is effectively brand new, with an age of 0 days and only 2 releases; this provides too little history to establish mature release practices or long-term maintenance.
The measured three-month window shows 0 commits and 0 active maintainers. The repository's recent push partly explains this because the project is newly published, but there is still no demonstrated ongoing maintenance history.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.