The README explains installation and authentication, and the package has only four runtime requirements. Its young project has five commits from one active contributor in three months and no security policy, leaving maintenance and security processes thin.
68%
Total Score
50
100
88
88
The repository owner is a user account rather than an organization, so the concentrated contributor activity is not offset by demonstrated organizational backing.
The package is young at about two months old, with three releases and a median interval of about 32 days. That shows continued publication but provides limited long-term maintenance evidence.
One contributor made all five commits in the last three months, creating a concentrated maintenance dependency with no demonstrated handoff capacity.
The repository had five commits in the last three months, showing recent activity, but the volume is modest for a package with a short history.
Composer is used for builds, but no security-scanning tools were detected, leaving automated security coverage unclear.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.