The five-file artifact has no README, tests, or changelog, leaving integration and maintenance context thin. It is not deprecated or archived, and its single runtime dependency keeps the technical surface small.
43%
Total Score
50
100
75
75
This is the only release, published about 3 years and 7 months ago, with no releases in the last 12 months. That strongly limits evidence of ongoing maintenance.
The package has no README, tests, or changelog, while the repository also reports no tests or changelog. The missing README is a real integration gap for an extension package, although the GitHub release history provides some release traceability.
The repository recorded no commits and no active maintainers in the last 3 months, consistent with a project that has been inactive since its initial release. No provided signal shows recent maintenance to offset this.
Composer is used as a build tool, but no repository security-scanning tooling was detected. This modestly reduces assurance for a package intended to be installed into an application.
The linked repository has no security policy, leaving no documented process for reporting or handling vulnerabilities. This is a transparency gap, though it is less severe than the observed maintenance inactivity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.