The package is well documented and has a small dependency surface with no install-time scripts. It lacks a repository security policy, and its short 46-day history plus heavily prerelease release mix leave less evidence of long-term stability.
82%
Total Score
100
100
79
75
The package is only 46 days old, but it has had 7 releases in that period, showing active initial development rather than abandonment. Its short history still limits evidence of long-term reliability.
The project uses Composer and Make for builds, showing basic build structure, but it reports no security-scanning tools, leaving a modest assurance gap.
No repository security policy was found. That does not show a security defect, but it reduces transparency about vulnerability reporting and response practices.
Version 1.6.1 is a stable major release and is not a prerelease, but 5 of the 7 recent releases were prereleases, making the release pattern somewhat unsettled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
iqual/project-scaffold Version ~2.0.0-alpha1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.