The package has a minimal README, no security scanning, and all six workflow actions are unpinned, limiting transparency and build reproducibility. MIT licensing, a single runtime dependency, tests, and organization backing provide useful counterweight.
62%
Total Score
83
100
69
75
The artifact includes a README and tests, and the repository also has tests. The README is only 14 characters and there is no changelog, which limits consumer guidance, though a missing changelog is normal packaging practice.
The package is about 800 days old with 11 releases, but only one release occurred in the last 12 months; this points to slowing delivery rather than abandonment on its own.
There were zero commits and zero active maintainers in the last three months, which is a meaningful maintenance warning, although the recent push and release provide some counterevidence.
The repository has zero stars and forks and one watcher, indicating little visible adoption or community support. Popularity is supporting evidence, so this is a modest concern rather than a verdict.
Composer build tooling is used, but no security scanning tools are present; that weakens automated maintenance and security hygiene.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.