The source tree is substantial and the package is backed by an organization, with nine releases in about two months. Missing tests, security scanning, and consumer documentation leave maintenance and integration risk.
58%
Total Score
50
50
75
83
There were 0 commits and 0 active maintainers in the last three months. For a package released only about six months ago, this is a meaningful sign that maintenance has stalled after the initial release burst.
The package declares 19 runtime dependencies, including AWS, database, framework, and messaging components. This is substantial integration surface and increases dependency maintenance burden.
The package has no README or tests, but it includes release notes for this exact version and the repository has GitHub releases. The release notes provide useful change documentation, while missing consumer documentation remains a real integration gap.
The repository has 0 stars, 1 fork, and 0 watchers. Low adoption is supporting caution, but popularity alone does not establish poor maintenance.
Composer build tooling is present, but no security-scanning tool was detected. This is a modest repository hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ramsey/uuid Version ^4.9 | — | — |
spiral/boot Version ^3.16 | — | — |
spiral/core Version ^3.16 | — | — |
psr/container Version ^2.0 | — | — |
spiral/config Version ^3.16 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.