The package is well documented and tested, with clear release notes and no install-time scripts. Its young 0.x status, single active contributor, missing security policy, and unpinned workflow actions leave meaningful maintenance and build-integrity concerns.
68%
Total Score
50
50
89
67
Six runtime dependencies, including the actively evolving MCP SDK, create some update and compatibility exposure for a young integration plugin.
The repository is owned by an individual rather than an organization, so the single-maintainer concentration is not offset by visible organizational backing.
One contributor made all two commits in the last three months, leaving maintenance concentrated entirely in a single person-owned project.
Only two commits were recorded in the last three months, indicating limited recent development activity despite the strong release cadence.
There are no open issues or pull requests, but there was also no issue or pull-request activity in the last month, so this is weak evidence of ongoing community maintenance.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
mcp/sdk Version ^0.7 | — | — |
symfony/finder Version ^7.0 || ^8.0 | — | — |
cakephp/cakephp Version ^5.2 | — | — |
symfony/filesystem Version ^7.0 || ^8.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.