The artifact has a README, tests, changelog, and no install-time scripts, supporting basic usability. It has made only one release, and the repository could not be found, so maintenance and provenance remain unverified.
53%
Total Score
100
60
100
This is the sole release, published 495 days ago, with no releases in the last 12 months. That leaves maintenance and project maturity unproven.
The manifest declares MIT and a license file is present, but the detected artifact license is MIT-0, creating a licensing mismatch that should be clarified before adoption.
The package is at v0.1.0 rather than a stable major release, which indicates an early-stage API. It is not marked as a prerelease, providing limited compensation.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^6.4 || ^7.0 | — | — |
symfony/console Version ^6.4 || ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.