The README, test suite, release notes, and MIT license make the package easy to evaluate and integrate. The single maintainer, absent security policy, and unpinned workflow actions leave less assurance as the project grows.
62%
Total Score
50
100
81
83
The repository is owned by an individual user rather than an organization, so the project has limited visible institutional backing; the single registry maintainer is consistent with that ownership.
This is a 114-day-old package with only one release, so there is little release history from which to judge sustained maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, a meaningful sign that maintenance may have paused after the initial release.
Composer build tooling is present, but no security-scanning tool was detected, leaving a modest assurance gap.
The repository has no security policy, so vulnerability reporting and disclosure expectations are not documented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
psr/simple-cache Version ^3.0 | — | — |
psr/event-dispatcher Version ^1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.