Consumer documentation is thin, and the project has limited visible operational safeguards. The package is correctly licensed, matches its source repository, and shows recent maintenance.
62%
Total Score
50
100
88
75
The registry namespace and repository are owned by the same individual account, which is consistent ownership but offers less organizational continuity.
The package has 88 releases over about 2 years and a release as recently as 16 days ago, but only 1 release in the last 12 months, indicating a sparse current cadence.
All recent commits came from one contributor, so maintenance depends entirely on a single active person; the repository is user-owned rather than organization-backed.
Only 1 commit from 1 active maintainer was recorded in the last 3 months, showing some recent activity but a thin maintenance base.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides no external adoption signal to offset the thin contributor base.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
aws/aws-sdk-php Version ^3.293.1 | — | — |
league/flysystem Version ^3.10.0 | — | — |
league/mime-type-detection Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.