The package includes a README, extensive tests, an MIT declaration, and clear organization backing. Its one-day history and pre-1.0 version leave little evidence of long-term stability, while the repository's recent push partly offsets the empty three-month activity window.
76%
Total Score
100
79
100
The package is only 1 day old, despite 6 releases in that period, so there is little evidence of sustained maintenance or release discipline.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest transparency gap, not evidence that the release is unsafe or unmaintained.
Version v0.22.1 is not from a stable major series, which signals API-change risk for dependents; the absence of prereleases is a small positive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/log Version ^3.0 | — | — |
psr/clock Version ^1.0 | — | — |
hydrakit/core Version ^0.22 | — | — |
hydrakit/cache Version ^0.22 | — | — |
hydrakit/console Version ^0.22 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.