Usable with caveats: it has recent releases, a clear MIT license, and a matching source repository, but current maintenance activity is weak. The repository has had no commits or issue movement in three months, with no security policy and no repository tests.
68%
Total Score
67
100
75
83
The artifact includes a README and tests, but the repository has neither tests nor a changelog; the packaged tests provide partial compensation, while the missing repository tests reduce transparency for future maintenance.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, a meaningful maintenance concern even though the registry shows three releases in the last year.
There are 4 open issues, but no new or closed issues and no pull-request activity in the last month, indicating limited visible project engagement.
The repository has 0 stars and 0 forks, with only 1 watcher; this does not make the package unsafe, but it provides little evidence of broad community review or support.
Composer is used for builds, but no security scanning tools are present; the absence of scanning is a transparency gap rather than evidence of a specific defect.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
hexmakina/black-box Version 0.1.* | — | — |
altorouter/altorouter Version 2.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.