The package includes a substantial README, tests, changelog, and an explicit MIT license. Its small audience and limited security documentation leave less external scrutiny, so pin this release and monitor maintenance.
76%
Total Score
67
83
83
The repository is owned by an individual user rather than an organization, so the small maintainer and contributor base represents a real continuity risk.
The package has only 5 releases since October 2020 and one release in the last 12 months, indicating a sparse release history. Recent repository activity partly offsets the concern.
Two contributors were active, but the top contributor made about 74% of recent commits, leaving maintenance substantially concentrated.
The repository has 0 stars and 0 forks, with 2 watchers, so there is little visible external adoption or review. This is supporting caution rather than evidence of abandonment by itself.
Composer is used for builds, but no security scanning tools were detected, limiting automated security oversight.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.