Documentation, release notes, repository tests, and a complete package tree make integration straightforward. Licensing is explicit, dependencies are modest, and no install-time scripts or deprecation are present.
68%
Total Score
67
100
78
83
Only one registry account can publish releases, and the project backing is an individual account rather than an organization, leaving limited publishing redundancy.
The package is 210 days old with only two releases, both published within about 80 minutes, so its long-term maintenance pattern is not yet established.
All three recent commits came from one contributor, so maintenance depends entirely on a single person without evidence of a broader contributor base.
The repository has one star and no forks or watchers, indicating limited visible adoption; this is supporting caution rather than evidence of failure by itself.
Composer and Just provide build tooling, but no security-scanning tools are reported, leaving a modest security-process gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/container Version ^2.0 | — | — |
inanepain/config Version >=0.4.0 | — | — |
inanepain/stdlib Version >=0.8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.