The package has a clear MIT license, a focused implementation, and an organization-backed repository. Its single registry maintainer and absent security policy limit confidence, although it is not deprecated or archived and has no install scripts.
61%
Total Score
67
100
83
83
Only one account has registry publishing access, which limits visible publishing redundancy; organization backing partly compensates for this thin registry maintainer list.
The package has five releases since August 2022, but none in the last 12 months; the latest release was about 19 months ago, which raises maintenance concerns.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the stale release history and increasing abandonment risk.
The repository has zero stars and forks and one watcher, offering little supporting evidence of broad community adoption. Popularity is only supporting evidence, so this does not determine the verdict.
Composer is used as the build tool, but no security scanning tool is configured, leaving automated security hygiene unverified.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.