Usable with caveats: this is a clean, licensed first release with a substantial source tree and no deprecation or install-time scripts. It has no release track record, no repository tests or security scanning, and the linked project has not yet demonstrated sustained activity.
62%
Total Score
50
100
75
88
The published artifact has no README, but the source repository does contain one; missing tests in the artifact is normal packaging practice, while the repository also reports no tests, leaving limited evidence of regression coverage.
The repository is owned by an individual account rather than an organization, so the single registry namespace and repository owner provide limited backing capacity.
This is the package's only release and it was published less than an hour before collection, so there is no history showing stable maintenance or release reliability.
The repository reports zero commits and zero active maintainers over the last three months; because the project is newly published, this may reflect its recent creation, but it provides no sustained maintenance evidence yet.
Composer build tooling is present, but no security scanning tooling is configured, leaving a modest transparency and maintenance gap.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.