The repository includes tests and a changelog, and the package declares MIT licensing. Its tiny consumer-facing README and absent security policy leave transparency weaker than its maintenance activity.
72%
Total Score
67
100
78
83
The artifact includes a README and changelog, while repository tests and a repository changelog provide useful project documentation. The README is only 16 characters, limiting consumer guidance.
The package and repository are owned by the same individual account, providing clear ownership but no organizational backing to offset the single-contributor concentration.
All 28 recent commits came from one contributor, so maintenance and continuity depend entirely on a single person.
The repository name matches the package, which supports the linkage, but the README does not mention the package, reducing documentation confidence.
The repository has only 2 stars and no forks. This is supporting evidence of a small project, not a health verdict by itself, but it provides little external adoption evidence.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
latte/latte Version ^3.1.5 | — | — |
getkirby/composer-installer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.