Usable with caveats: the package is licensed, backed by an organization, tested, and not deprecated or archived. It has only one release, no commits in about 14 months, a nearly empty README, and limited repository security hygiene.
62%
Total Score
75
100
72
75
Tests are present in the package and repository, but the README contains only 14 characters and offers essentially no consumer guidance. The missing changelog is normal packaging practice and is not a concern by itself.
This release is the package's only release, published about two years ago, with no releases in the last 12 months. That leaves limited evidence of maturity or ongoing maintenance.
There were no commits and no active maintainers in the last three months, consistent with maintenance having stalled after the initial release.
The repository has zero stars and forks and only one watcher, so there is little community evidence to support long-term maturity. Low popularity alone is not decisive for a small library.
Composer build tooling is present, but no security scanning tool was detected, leaving a modest repository-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.