This is a very new, pre-1.0 package with only two releases on the same day, so its long-term maintenance and compatibility track record are not yet established. It is nevertheless well-scaffolded: the repository is active and unarchived, the package has documentation, tests, a changelog, a clear MIT license, Composer build tooling, read-only workflow permissions, and no detected dangerous workflow patterns. The single maintainer, absent security policy, absent security scanning, and lack of measurable commit or issue history warrant caution, but the repository's age makes the zero-activity and zero-popularity metrics less concerning than they would be for an older package.
68%
Total Score
63
100
83
90
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/cache Version ^3.0 | — | — |
psr/container Version ^2.0 | — | — |
symfony/config Version ^6.4 || ^7.0 || ^8.0 | — | — |
symfony/http-kernel Version ^6.4 || ^7.0 || ^8.0 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.