The package includes 44 repository tests, release notes, a changelog, and clear usage documentation. Its workflow leaves two actions unpinned and the repository has no security policy, so ongoing project hygiene is still limited.
72%
Total Score
83
100
83
75
This is the package's first release, published today, so there is no release cadence or track record to establish sustained maintenance. The repository and release documentation provide some transparency but cannot replace history.
No commits or active maintainers were recorded in the last three months. Because the package is newly released, this is partly explained by its age, but it still provides no evidence of an established maintenance cadence.
The repository has no stars, forks, or watchers. For a newly published package this is unsurprising, but it offers no supporting evidence of community adoption.
The repository uses Composer build tooling, but no security scanning tool was detected. The build setup is present, while automated security coverage is limited.
No repository security policy was found. This is a transparency and reporting gap, though it is not by itself evidence that the package is unsafe.
We didn't find any vulnerabilities for this package.
No maintainer information available.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.