Recent publishing is offset by only two releases and no commits in the last three months. The repository has tests, release notes, organization backing, and a security policy, but all 13 workflow actions are unpinned.
68%
Total Score
67
100
83
83
The package has only 2 releases over about 3 years, with 1 release in the last 12 months and a median interval of about 990 days. The recent v2.0.0 release provides some evidence of continued publishing, but the overall cadence is sparse.
There were 0 commits and 0 active maintainers in the last three months. Despite the recent release and push evidence, this indicates limited current development activity.
There are no open issues or pull requests and no issue or pull-request activity in the last month. This is consistent with a small project but provides little evidence of active maintenance.
The repository has 0 stars, 0 forks, and 1 watcher. Popularity is only supporting evidence, but these very low counts provide little external validation for a dependency.
Composer build tooling is present, but no security scanning tools were detected. The repository does provide tests and a security policy, which partly offsets this tooling gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.