It is a small, test-covered package with a clean dependency profile and no install-time scripts. A single maintainer, no security policy, and no automated security scanning leave limited oversight.
64%
Total Score
50
100
88
83
Only one registry maintainer is listed. The linked repository is user-owned rather than organization-backed, so there is limited visible publishing redundancy.
The package has only 3 releases over 710 days, with a median interval of about 303 days and just 1 release in the last 12 months. This indicates slow maintenance, despite a release in June 2026.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. Combined with the slow release history, this raises concern about maintenance responsiveness.
Composer is used as the build tool, but no security scanning tools are configured. The missing scanning is a modest transparency and oversight gap for a security-related utility.
The repository has no security policy. For a password-generation package, this leaves no documented channel or process for reporting security issues.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.