The package has a clear README, tests, an MIT declaration, and an organization-backed repository. Its only release is over a year old, with no recent commits or users, and no security policy; pinning this exact version is prudent.
64%
Total Score
83
72
83
Only one release exists, published over a year ago, with no releases in the past 12 months. This leaves maintenance and future compatibility uncertain.
There were no commits and no active maintainers in the past three months. For a package with only one release, this is meaningful evidence of limited ongoing maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but the absence of any visible adoption adds to the uncertainty around this new package.
Composer build tooling is present, showing basic project automation. No security-scanning tools are reported, which is a minor hygiene gap but not a severe dependency risk.
The linked repository is not archived, although its last push was over a year ago and therefore does not offset the lack of recent activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.