Its documentation, tests, release notes, and matching source repository make the package easy to inspect. The project is brand new, pre-1.0, and has no security policy; pin this exact version while its maintenance record develops.
68%
Total Score
67
100
78
75
The repository is owned by an individual rather than an organization, so the single registry maintainer reflects a genuinely narrow backing base.
Only three releases exist and the package is effectively hours old, so there is not yet enough history to establish durable maintenance or release stability.
There are no recorded commits or active maintainers in the preceding three months, but the repository is newly created and has current release activity; this limits confidence more than it proves abandonment.
The repository has no stars, forks, or watchers, which is expected for a package released today but leaves no external adoption evidence.
Composer build tooling is present, but no security-scanning tool is configured, leaving a modest repository hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/neon Version ^3.4 | — | — |
symfony/yaml Version ^7.0|^8.0 | — | — |
symfony/process Version ^7.0|^8.0 | — | — |
illuminate/console Version ^11.0|^12.0|^13.0 | — | — |
illuminate/support Version ^11.0|^12.0|^13.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.