The package is small and focused, with a single runtime dependency and a tested source repository. Maintenance capacity is limited by one registry maintainer, no recent commits, and no security scanning, though the latest stable release remains current enough.
72%
Total Score
63
100
89
83
Only one account has registry publishing access, so release continuity depends on a narrow publishing base. The repository is user-owned rather than organization-backed, offering no compensating organizational capacity.
The registry namespace and repository are owned by the same individual, confirming ownership consistency but providing no broader organizational backing.
No commits or active maintainers were recorded in the last 3 months. The recent release partly offsets this, but the pause weakens evidence of ongoing maintenance.
The repository has 7 stars, 2 forks, and 1 watcher. This is limited adoption evidence, but popularity is only supporting context and does not outweigh the maintenance signals.
Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a maintenance and transparency gap, not proof of unsafe code.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.