The package includes a clear README, matching source tree, license, and no install-time scripts. Organization backing and a security policy add useful safeguards, though the small project footprint leaves limited evidence of long-term maturity.
67%
Total Score
83
79
100
This is the package's only release, published 80 days ago, so there is little release history to establish long-term maintenance or stability.
All 10 recent commits came from one contributor, leaving maintenance dependent on a single active developer; organization backing provides some handoff capacity but does not remove the concentration.
Composer is used for builds, but no security-scanning tools were detected, leaving a modest security-process gap without evidence of a release defect.
Version 0.1.0 is an early major version, which signals an immature API and limited compatibility history despite not being marked as a prerelease.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.