The repository is not archived, the package includes tests and a README, and its dependency surface is small. Its release history is only one day old, so sustained maintenance is not yet established.
68%
Total Score
100
100
88
75
This is the package's first release, published only hours ago, with no prior release cadence to demonstrate sustained maintenance. Its newness limits confidence but does not by itself indicate abandonment.
Composer is used as the build tool, but no security-scanning tooling is present. This is a modest transparency and maintenance-hygiene gap, not evidence that the release is unsafe.
The repository has no security policy. For a small, first-day library this is a documentation gap, but it leaves vulnerability-reporting expectations undefined.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.