Documentation, tests, and release notes are unusually complete for a first release. Read-only workflows and organization backing help, but unpinned actions and no security policy leave maintenance hygiene to watch.
68%
Total Score
67
100
86
67
This is the package's first release, published today, so there is no demonstrated release cadence or long-term maintenance history yet.
All five recent commits came from one contributor. Organization ownership provides some handoff capacity, but no second active contributor is shown to reduce the immediate concentration risk.
Five commits from one active maintainer in the last three months show recent work, but the short observation window and single-person activity provide limited evidence of durable maintenance.
Composer build tooling is present, but no repository security-scanning tool was detected, leaving an avoidable verification gap.
The repository has no security policy, which reduces transparency about reporting and handling vulnerabilities in a network-facing client.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
mcp/sdk Version ~0.8.1 | — | — |
nyholm/psr7 Version ^1.8 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.