A single release provides little evidence of long-term compatibility or maintenance. The source includes tests, matching package references, and clear MIT licensing, which reduces transparency concerns.
58%
Total Score
50
81
75
The package is 288 days old but has only one release, so there is little history to demonstrate sustained maintenance or compatibility stability.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign of limited recent maintenance.
The repository has zero stars, forks, and watchers. This is supporting evidence of a very small user base, but it is not decisive because popularity is not required for a healthy package.
No repository security policy was found, leaving vulnerability-reporting expectations and response procedures undocumented.
Version v0.2.1 is not a stable major release, which leaves more uncertainty about API stability for dependents.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nette/di Version ^2.4 || ^3.0 | — | — |
moneyphp/money Version ^4.0 | — | — |
guzzlehttp/guzzle Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.