The package is clearly documented, licensed, and has a matching source repository with a recent release. Keep in mind that its small project footprint and workflow credential hygiene leave less operational margin than mature alternatives.
68%
Total Score
63
100
88
83
One registry publishing account is listed, but the repository is organization-owned, which provides some backing and makes a short registry maintainer list less concerning.
The package has only 4 releases across about 3 years, with 1 release in the last 12 months and a median interval of about 210 days; this indicates a slow maintenance cadence.
The repository recorded 0 commits and 0 active maintainers in the last 3 months, despite a later recorded push, so current development activity is limited or intermittent.
There are no open issues or pull requests, and no recent issue or pull-request activity; this is neutral for a small package but provides little evidence of an active community.
Composer build tooling is present, but no security-scanning tools are detected, leaving a modest security-process gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.