The package has clear documentation, repository tests, a changelog, and only one runtime dependency. Long-term continuity remains uncertain because there is one release and all recent commits come from one contributor; no security policy is published.
68%
Total Score
75
100
81
75
This is the only release, published 160 days ago, so release maturity and ongoing delivery are limited. Recent repository commits partly offset the concern, but do not establish a release track record.
All 8 recent commits came from one contributor, so maintenance depends heavily on a single person and has limited handoff resilience.
The repository uses Composer and just, providing build tooling, but no security-scanning tools were detected. That leaves security checks less visible and potentially less repeatable.
No repository security policy was found. This is a transparency and issue-handling gap, although it is not evidence of a security defect by itself.
Version 0.1.0 is not marked prerelease, but it remains an early major version with no later stable release to demonstrate API maturity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.